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SYMANTEC SOFTWARE LICENSE AGREEMENT 


MPORTANT: PLEASE READ THE TERMS A 
CONDITIONS OF THIS LICENSE AGREEMENT 
CAREFULLY BEFORE USING THE SOFTWARE. 
SYMANTEC CORPORATION AND/OR ITS SUBSIDIARIES 
“SYMANTEC”) IS WILLING TO LICENSE THE SOFTWARE 
TO YOU AS THE INDIVIDUAL, THE COMPANY, OR THE 
LEGAL ENTITY THAT WILL BE UTILIZING THE 
SOFTWARE (REFERENCED BELOW AS “YOU” OR 
“YOUR”) ONLY ON THE CONDITION THAT YOU ACCEPT 
ALL OF THE TERMS OF THIS LICENSE AGREEMENT. THIS 
S A LEGAL AND ENFORCEABLE CONTRACT BETWEEN 
YOU AND SYMANTEC. BY OPENING THIS PACKAGE, 
BREAKING THE SEAL, CLICKING ON THE “AGREE” OR 
“YES” BUTTON OR OTHERWISE INDICATING ASSENT 
ELECTRONICALLY, OR LOADING THE SOFTWARE, YOU 
AGREE TO THE TERMS AND CONDITIONS OF THIS 
AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS 
AND CONDITIONS, CLICK ON THE “I DO NOT AGREE” OR 
“NO” BUTTON, OR OTHERWISE INDICATE REFUSAL, 
MAKE NO FURTHER USE OF THE SOFTWARE, AND 
RETURN THE FULL PRODUCT WITH PROOF OF 
PURCHASE TO THE DEALER FROM WHOM IT WAS 
ACQUIRED WITHIN SIXTY (60) DAYS OF PURCHASE, 
AND YOUR MONEY WILL BE REFUNDED. 


1. LICENSE: 


The software which accompanies this license (collectively 
he “Software”) is the property of Symantec or its licensors 
and is protected by copyright law. While Symantec 
continues to own the Software, You will have certain rights 
o use the Software after Your acceptance of this license. 
This license governs any releases, revisions, or 
enhancements to the Software that Symantec may furnish 
o You. Except as may be modified by a Symantec license 
certificate, license coupon, or license key (each a “License 
Module”) which accompanies, precedes, or follows this 
icense, Your rights and obligations with respect to the use 
of this Software are as follows: 


YOU MAY: 


A. use one copy of the Software on a single computer. If a 
License Module accompanies, precedes, or follows this 
icense, You may make that number of copies of the 
Software licensed to You by Symantec as provided in Your 
License Module. Your License Module shall constitute 
roof of Your right to make such copies. 
B. make one copy of the Software for archival purposes, or 
copy the Software onto the hard disk of Your computer and 
retain the original for archival purposes; 
C. use the Software on a network, provided that You have a 
icensed copy of the Software for each computer that can 
access the Software over that network; and 
D. after written notice to Symantec, transfer the Software 
on a permanent basis to another person or entity, provided 
hat You retain no copies of the Software and the 
ransferee agrees to the terms of this license. 


YOU MAY NOT: 


A. copy the printed documentation which accompanies the 
Software; 


B. sublicense, rent or lease any portion of the Software; 
reverse engineer, decompile, disassemble, modify, 
translate, make any attempt to discover the source code of 
the Software, or create derivative works from the Software; 
C. use a previous version or copy of the Software after You 
have received a disk replacement set or an upgraded 
version. Upon upgrading the Software, all copies of the 
prior version must be destroyed; 

D. use a later version of the Software than is provided 
herewith unless You have purchased upgrade insurance or 
have otherwise separately acquired the right to use such 
ater version; 

E. use, if You received the software distributed on media 
containing multiple Symantec products, any Symantec 
software on the media for which You have not received a 
permission in a License Module; nor 

F. use the Software in any manner not authorized by this 
icense. 


2. CONTENT UPDATES: 


Certain Symantec software products utilize content that is 
updated from time to time (antivirus products utilize 
updated virus definitions; content filtering products utilize 
updated URL lists; firewall products utilize updated 
irewall rules; vulnerability assessment products utilize 
updated vulnerability data, etc.; collectively, these are 
referred to as “Content Updates”). You may obtain Content 
Updates for any period for which You have purchased a 
subscription for Content Updates for the Software 
including any subscription included with Your original 
purchase of the Software), purchased upgrade insurance 
or the Software, entered into a maintenance agreement 
hat includes Content Updates, or otherwise separately 
acquired the right to obtain Content Updates. This license 
oes not otherwise permit You to obtain and use Content 
Updates. 


3. SIXTY (60) DAY MONEY BACK GUARANTEE: 


You are the original licensee of this copy of the Software 
and are not completely satisfied with it for any reason, 
please contact Symantec Customer Service, for a refund of 
he money You paid for the Software (less shipping, 
handling, and any applicable taxes) at any time during the 
sixty (60) day period following the date of purchase. 


4. LIMITED WARRANTY: 


Symantec warrants that the media on which the Software 
is distributed will be free from defects for a period of sixty 
(60) days from the date of delivery of the Software to You. 
Your sole remedy in the event of a breach of this warranty 
will be that Symantec will, at its option, replace any 
defective media returned to Symantec within the warranty 
period or refund the money You paid for the Software. 
Symantec does not warrant that the Software will meet 
Your requirements or that operation of the Software will be 
uninterrupted or that the Software will be error-free. 

THE ABOVE WARRANTY IS EXCLUSIVE AND IN LIEU OF 
ALL OTHER WARRANTIES, WHETHER EXPRESS OR 
IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF 
MERCHANTABILITY, FITNESS FOR A PARTICULAR 
PURPOSE AND NONINFRINGEMENT OF INTELLECTUAL 


PROPERTY RIGHTS. THIS WARRANTY GIVES YOU 
SPECIFIC LEGAL RIGHTS. YOU MAY HAVE OTHER 
RIGHTS, WHICH VARY FROM STATE TO STATE AND 
COUNTRY TO COUNTRY. 


5. DISCLAIMER OF DAMAGES: 


SOME STATES AND COUNTRIES, INCLUDING MEMBER 
COUNTRIES OF THE EUROPEAN ECONOMIC AREA, DO 
OT ALLOW THE LIMITATION OR EXCLUSION OF 
LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL 
DAMAGES SO THE BELOW LIMITATION OR EXCLUSION 
MAY NOT APPLY TO YOU. 
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE 
LAW AND REGARDLESS OF WHETHER ANY REMEDY 
SET FORTH HEREIN FAILS OF ITS ESSENTIAL PURPOSE, 
N NO EVENT WILL SYMANTEC OR ITS LICENSORS BE 
LIABLE TO YOU FOR ANY SPECIAL, CONSEQUENTIAL, 
NDIRECT OR SIMILAR DAMAGES, INCLUDING ANY 

LOST PROFITS OR LOST DATA ARISING OUT OF THE USE 
OR INABILITY TO USE THE SOFTWARE EVEN IF 
SYMANTEC HAS BEEN ADVISED OF THE POSSIBILITY OF 
SUCH DAMAGES. 
N NO CASE SHALL SYMANTEC'S OR ITS LICENSORS' 
LIABILITY EXCEED THE PURCHASE PRICE FOR THE 
SOFTWARE. The disclaimers and limitations set forth 
above will apply regardless of whether You accept the 
Software. 
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6. U.S. GOVERNMENT RESTRICTED RIGHTS: 


RESTRICTED RIGHTS LEGEND. All Symantec products 
and documentation are commercial in nature. The software 
and software documentation are “Commercial Items”, as 
that term is defined in 48 C.F.R. section 2.101, consisting 
of “Commercial Computer Software” and “Commercial 
Computer Software Documentation”, as such terms are 
defined in 48 C.F.R. section 252.227-7014(a)(5) and 48 
C.F.R. section 252.227-7014(a)(1), and used in 48 C.F.R. 
section 12.212 and 48 C.F.R. section 227.7202, as 
applicable. Consistent with 48 C.F.R. section 12.212, 48 
C.F.R. section 252.227-7015, 48 C.F.R. section 227.7202 
through 227.7202-4, 48 C.F.R. section 52.227-14, and 
other relevant sections of the Code of Federal Regulations, 
as applicable, Symantec's computer software and 
computer software documentation are licensed to United 
States Government end users with only those rights as 
granted to all other end users, according to the terms and 
conditions contained in this license agreement. 
Manufacturer is Symantec Corporation, 20330 Stevens 
Creek Blvd., Cupertino, CA 95014. 


7. EXPORT REGULATION: 


Export, re-export of this Software is governed by the laws 
and regulations of the United States and import laws and 
regulations of certain other countries. Export or re-export 
of Software to any entity on the Denied Parties List and 
other lists promulgated by various agencies of the United 
States Federal Government is strictly prohibited. 


8. GENERAL: 


If You are located in North America or Latin America, this 
Agreement will be governed by the laws of the State of 


California, United States of America. Otherwise, this 
Agreement will be governed by the laws of England. This 
Agreement and any related License Module is the entire 
agreement between You and Symantec relating to the 
Software and: (i) supersedes all prior or contemporaneous 
oral or written communications, proposals and 
representations with respect to its subject matter; and (ii) 
prevails over any conflicting or additional terms of any 
uote, order, acknowledgment or similar communications 
between the parties. This Agreement shall terminate upon 
Your breach of any term contained herein and You shall 
cease use of and destroy all copies of the Software. The 
isclaimers of warranties and damages and limitations on 
liability shall survive termination. This Agreement may 
only be modified by a License Module which accompanies 
this license or by a written document which has been 
signed by both You and Symantec. Should You have any 
uestions concerning this Agreement, or if You desire to 
contact Symantec for any reason, please write to: (i) 
Symantec Customer Service, 555 International Way, 
Springfield, OR 97477, U.S.A. or (ii) Symantec Customer 
Service Center, PO BOX 5689, Dublin 15, Ireland. 


If you're installing Norton AntiVirus for the first time 
Start here 


If you're installing Norton 
AntiVirus for the first time 


Start here 


~> Determine which file system your computer uses. 


{On your desktop, double-click My Computer, 
right-click drive C, and click Properties. 


2 Which file system are you using? 


= FAT (Windows 98/Me/2000/XP) 
See “If you use a FAT file system" on page 6. 


= NTFS (Windows 2000/XP only) 
See “If you use an NTFS file system" on page 7. 


O) For detailed instructions and an animated Web tutorial that 
walks you through each step of the process, go to 
www.service.symantec.com/installtutorial 
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If you use a FAT file system 


Check for viruses that affect installation. 


4 Insert the Norton AntiVirus CD into your CD-ROM 
drive and restart your computer. 


If you do not have a Norton AntiVirus CD or 
cannot start your computer from a CD, create 
Emergency Disks on another uninfected 
computer. 


See "Create Emergency Disks" on page 22. 


2 Runa full system scan. 


2 Was a virus found? 
a Yes 
Run a virus scan again using the Delete switch. 
a No 
See "Finish installation” on page 8. 


O) For detailed instructions and an animated Web tutorial that 
walks you through each step of the process, go to 
www.service.symantec.com/installtutorial 


If you're installing Norton AntiVirus for the first time 
If you use an NTFS file system 


If you use an NTFS file system 


Check for viruses that affect installation. 


~% 


Can you establish a connection to the Internet? 
a Yes 
Go to http://security.symantec.com and follow 
the onscreen instructions to scan for threats. 
a No 
For Windows XP: Go to service.symantec.com 
For Windows 2000: Go to service.symantec.com 


See "Finish installation” on page 8. 


~% 


Was a virus found? 

a Yes 
Write down the name of the virus and go to 
http://securityresponse.symantec.com to locate 
specific removal instructions. 

a No 
If you have not already done so, install Norton 
AntiVirus. 


See "Finish installation” on page 8. 


O) For detailed instructions and an animated Web tutorial that 
walks you through each step of the process, go to 
www.service.symantec.com/installtutorial 


7 


8 | If you're installing Norton AntiVirus for the first time 
Finish installation 


Finish installation 


After you've checked for viruses, it's safe to install 
Norton AntiVirus. 


4 Uninstall any other antivirus programs on your 
computer. 


On your desktop, use the Add/Remove Programs 
Control Panel to select the program to uninstall. 


2 (lose all open programs on your computer 
including the items running in the Windows 
system tray. 


3 Install Norton AntiVirus from the Norton AntiVirus 
CD. 
See “Install Norton AntiVirus" on page 23. 


2? Did you see the message “Norton AntiVirus has 
been installed successfully"? 
a Yes 
See “After installation” on page 27. 


a No 
Write down the error message on the screen 
and go to http://service.symantec.com for 
further assistance. 
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About Norton 
AntiVirus 


Norton AntiVirus provides comprehensive virus prevention, detection, and 
elimination software for your computer. It automatically finds and repairs 
infected files to keep your data secure. Easy updating of the virus definition 
service over the Internet keeps Norton AntiVirus prepared for the latest 
threats. Worm Blocking and Script Blocking increase protection by 
detecting new threats before virus definitions are created. 


What's new in Norton AntiVirus 


Norton AntiVirus 2003 expands file repair and deletion options and 
introduces virus protection for instant messenger attachments, Worm 
Blocking, password protection for Norton AntiVirus options, and the Log 
Viewer with more detailed visibility into protection activities. The new 
features are: 


= Expanded file repair and deletion 
Norton AntiVirus now automatically repairs all repairable files 
without any interaction with you. Additionally, when Norton AntiVirus 
finds a worm or Trojan horse, it automatically deletes the infected 
file(s). 

= Instant messenger support and options 
Norton AntiVirus now scans files received by America Online, Yahoo!, 
and MSN instant messenger programs. You can choose to scan files 
received by one or all three programs. Norton AntiVirus automatically 
repairs or guarantines the infected file(s). 
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How viruses work 


Worm Blocking 

Norton AntiVirus scans outgoing email attachments for worms and 
alerts you before sending any infected files. Norton AntiVirus blocks 
the worm and recommends the appropriate action, so you prevent 
sending it in an email message. 


Password protection 

Norton AntiVirus allows you to set, change, and reset a password to 
control your option settings, so that unauthorized users can’t tamper 
with your virus protection. 


Log Viewer 

Norton AntiVirus organizes information about virus alerts, application 
activities, and errors. You determine how many activities you want to 
record. 


How viruses work 


A software virus is a parasitic program written intentionally to alter the 
way your computer operates without your permission or knowledge. A 
virus attaches copies of itself to other files and, when activated, may 
damage files, cause erratic system behavior, or display messages. 


Computer viruses infect system files and documents created by programs 
with macro capabilities. Some system viruses are programmed specifically 
to corrupt programs, delete files, or erase your disk. 


Macro viruses spread quickly 


Macros are simple programs that are used to do things such as automate 
repetitive tasks in a document or make calculations in a spreadsheet. 
Macros are written in files created by such programs as Microsoft Word 
and Microsoft Excel. 


Macro viruses are malicious macro programs that are designed to replicate 
themselves from file to file and can often destroy or change data. Macro 
viruses can be transferred across platforms and spread whenever you open 
an infected file. 
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Trojan horses hide their true purposes 


Trojan horses are programs that appear to serve some useful purpose or 
provide entertainment, which encourages you to run them. But the 
programs also serve a covert purpose, which may be to damage files or 
place a virus on your computer. 


A Trojan horse is not a virus because it does not replicate and spread like a 
virus. Because Trojan horses are not viruses, files that contain them cannot 
be repaired. To ensure the safety of your computer, Norton AntiVirus 
detects Trojan horses so you can delete them from your computer. 


Worms take up space 


Worms are programs that replicate without infecting other programs. Some 
worms spread by copying themselves from disk to disk. They search for 
specific types of files and try to damage or destroy those files. Worms 
replicate only in memory, creating myriad copies of themselves, all 
running simultaneously, which slows down the computer. Other worms 
spread through your email address list and can email themselves without 
you knowing. Like Trojan horses, worms are not viruses and therefore 
cannot be repaired. They must be deleted from your computer. 


How viruses spread 


A virus is inactive until you launch an infected program, start your 
computer from a disk that has infected system files, or open an infected 
document. For example, if a word processing program contains a virus, the 
virus activates when you run the program. Once a virus is in memory, it 
usually infects any program you run, including network programs (if you 
can make changes to network folders or disks). 


Viruses behave in different ways. Some viruses stay active in memory until 
you turn off your computer. Other viruses stay active only as long as the 
infected program is running. Turning off your computer or exiting the 
program removes the virus from memory, but does not remove the virus 
from the infected file or disk. That is, if the virus resides in an operating 
system file, the virus activates the next time you start your computer from 
the infected disk. If the virus resides in a program, the virus activates the 
next time you run the program. 


To prevent virus-infected programs from getting onto your computer, 
Norton AntiVirus automatically scans files before you copy or run them. 
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This includes programs you download from news groups or Internet Web 
sites and any email attachments that you receive. 


Viruses spread through email and instant messenger attachments. Norton 
AntiVirus monitors incoming and outgoing email messages and instant 
messenger attachments for potential threats. 


How Norton AntiVirus works 


Norton AntiVirus monitors your computer for known and unknown viruses. 
A known virus is one that can be detected and identified by name. An 
unknown virus is one for which Norton AntiVirus does not yet have a 
definition. 


Norton AntiVirus continually monitors your computer to protect you from 
both types of viruses, using virus definitions to detect known viruses, and 
Bloodhound technology, Script Blocking, and Worm Blocking to detect 
unknown viruses. Virus definitions, Bloodhound technology, Script 
Blocking, and email and instant messenger scanning are all used during 
scheduled scans and manual scans, and are used by Auto-Protect to 
constantly monitor your computer. 


The virus definition service stops known viruses 


See “Look up 
viruses in Norton 
AntiVirus” on 
page 75. 


The virus definition service consists of files that Norton AntiVirus uses to 
recognize viruses and intercept their activity. You can look up virus names 
in Norton AntiVirus, and access an encyclopedia of virus descriptions on 
the Symantec Web site. 


Bloodhound technology stops unknown viruses 


Bloodhound is the Norton AntiVirus scanning technology for detecting new 
and unknown viruses. It detects viruses by analyzing a file’s structure, 
behavior, and other attributes such as programming logic, computer 
instructions, and any data contained in the file. It also sets up simulated 
environments in which to load documents and test for macro viruses. 


Script Blocking stops script-based viruses 


A script is a program written with a scripting language, such as Visual 
Basic Script or JavaScript and can be executed without user interaction. 
Scripts can be opened with text editors or word processing programs, so 
they are very easy to change. 
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Scripts can be used when you log on to the Internet, or check your email. 
Restarting your computer involves using scripts that tell your computer 
what programs to load and run. 


A script can also be written to perform malicious activities when it is 
launched. You can unknowingly receive a malicious script by opening an 
infected document or email attachment, viewing an infected HTML email 
message, or visiting an infected Internet Web site. 


Script Blocking detects Visual Basic and JavaScript viruses without the 
need for specific virus definitions. It monitors the scripts for virus-like 
activity and alerts you if it is found. 


Worm Blocking stops worms before they spread 


Worms hide in files and are not active or dangerous until the files are 
opened. You can unknowingly copy or send an infected file by email. A file 
infected with a worm cannot be repaired; it must be deleted. 


Worm Blocking scans all outgoing email messages and alerts you if a 
malicious worm is detected. Once a worm is detected, Norton AntiVirus 
blocks the worm and recommends the appropriate action, so you prevent 
sending it in an email message. 


Auto-Protect keeps you safe 


Norton AntiVirus Auto-Protect loads into memory when Windows starts, 
providing constant protection while you work. 


Using Auto-Protect, Norton AntiVirus automatically: 


= Eliminates viruses, worms, and Trojan horses, including macro 
viruses, and repairs damaged files 


= Checks for viruses every time you use software programs on your 
computer, insert floppy disks or other removable media, or use 
document files that you receive or create 


= Monitors your computer for any unusual symptoms that may indicate 
an active virus 


= Protects your computer from Internet-borne viruses 
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How to maintain protection 


When Norton AntiVirus is installed, you have complete virus protection. 
However, new viruses are created constantly. Viruses can spread when you 
start your computer from an infected disk or when you run an infected 
program. There are several things you can do to avoid viruses and to 
recover quickly should a virus strike. 


Avoid viruses 


See “About Norton 
AntiVirus on the 
Web" on page 49. 


See “Keeping 
current with 
LiveUpdate” on 
page 59. 


See “Manually scan 
disks, folders, and 
files" on page 52. 


See “Schedule 
scans" on page 56. 


See “Ensure that 
protection settings 
are enabled" on 


page 51. 


It is important that you practice regular file maintenance and that you keep 
Norton AntiVirus up-to-date. 


To avoid viruses: 


Write-protect removable media. 


Stay informed about viruses by logging on to the Symantec Security 
Response Web site (http://securityresponse.symantec.com) where 
there is extensive, frequently updated information on viruses and 
virus protection. 


Keep LiveUpdate turned on at all times to continually update your 
virus definitions files. 


Run LiveUpdate regularly to receive new program updates. 


Keep Norton AntiVirus Auto-Protect turned on at all times to prevent 
viruses from infecting your computer. 


If Norton AntiVirus Auto-Protect is not turned on, scan removable 
media before you use them. 


Schedule periodic scans to occur automatically. 


Watch for email from unknown senders. Do not open anonymous 
attachments. 


Keep Worm Blocking turned on to avoid sending infected email 
attachments. 


Keep Script Blocking turned on to detect any virus-like activity. 


Keep all recommended maximum protection settings turned on. 
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Prepare for emergencies 


It is also important that you are prepared in case your computer is infected 
by a virus. 


To prepare for emergencies: 


= Back up files regularly and keep more than just the most recent 
backup. 
See "Create = If you are using a computer that cannot start from a CD, create a set of 
ae niska Emergency Disks, from which you can start your computer and scan 
for viruses. 


See "About Rescue $ Ifyou are using Windows 98 or Me, create and keep updated a set of 

Hee on page36. Rescue Disks, with which you can start your computer in DOS mode 
and use Norton AntiVirus to fix virus-related problems and recover 
from a system crash. 
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System requirements 


Before installing Norton AntiVirus, take a moment to review the system 
requirements listed in this chapter. Windows 98 and Windows Me users 
should have several blank 1.44 MB disks available to make Rescue Disks. 


To use Norton AntiVirus, your computer must have one of the following 
Windows operating systems: 


= = Windows 98/98SE/Me 
= Windows 2000 Professional Edition 


= Windows XP Professional/Home Edition 


Installation of Norton AntiVirus is not supported on Windows 95/NT, 
Macintosh, Linux, or server versions of Windows 2000/XP computers. 


If you are planning to upgrade your Windows operating system from 
Windows 98/Me to Windows 2000/XP, you must uninstall Norton 
AntiVirus first and then reinstall after the upgrade is complete. 
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Your computer must also meet the following minimum requirements. 


Windows 2000 = Intel Pentium processor (or compatible) at 133 MHz or 
Professional higher 
ao = 64 MB of RAM 


= 70 MB of hard disk space 
= Internet Explorer 5.0 or later (5.5 recommended) 
= CD-ROM or DVD-ROM drive 


O) If you are installing on Windows 2000/XP, you must install with 
administrator privileges. 
Supported email clients 


Email scanning is supported for any POP3 compatible email client 
including: 


Microsoft Outlook Express version 4, 5, or 6 
Microsoft Outlook 97/98/2000/XP 


Netscape Messenger version 4, Netscape Mail version 6 


Eudora Light version 3, Eudora Pro version 4, Eudora version 5 


Pegasus 4 
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Email scanning does not support the following email clients: 
= [MAP clients 

= AOL clients 

= POP3s with SSL (Secure Sockets Layer) 

= Web-based email such as Hotmail and Yahoo! 


= Lotus Notes mail 


Supported instant messenger clients 
= AOL Instant Messenger, version 4.7 or later 
= Yahoo! Instant Messenger, version 5.0 or later 


= MSN Messenger and Windows Messenger, version 4.6 or later 


Before installation 


See “Create Before you install Norton AntiVirus, prepare your computer. If your 


sites Disks” computer cannot start from a CD, create Emergency Disks. 


If you suspect that you have a virus 


See "Starthere”’on If you try to install and your computer has a virus, Norton AntiVirus 

page 5. requests that you restart your computer. Restart from the Norton AntiVirus 
CD and scan your computer’s hard disk for viruses. The Norton AntiVirus 
emergency program uses the virus definitions from the Norton AntiVirus 
CD, and is not as up-to-date as virus definitions downloaded using 
LiveUpdate. 


Once the virus has been repaired, delete the Norton AntiVirus install files 
in the temporary folder that are left behind after the forced shutdown. 


Prepare your computer 


See "Ifyou needto If you have a version of Norton AntiVirus 2000-2002, the new version 

al i A diia automatically removes the older version. If your version is older than 2000, 

page 30. you must uninstall it before installing the new version. If you have Norton 
AntiVirus 2002, you can transfer your existing option settings to the new 


version of the program. 
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Before you install Norton AntiVirus, use these suggestions to prepare your 
computer: 


If you have any other antivirus programs on your computer, you must 
uninstall them and restart your computer before installing Norton 
AntiVirus. 

To uninstall other antivirus programs, see the user documentation that 
came with the program. 


Close all other Windows programs before installing Norton AntiVirus, 
including those programs displayed in the Windows tray. 


Create Emergency Disks 


See "If you need to 
use Emergency 
Disks" on page 74. 


Emergency Disks are used to start your computer and scan for viruses in 
case of a problem. If your computer can start from a CD, you can use the 
Norton AntiVirus CD in place of Emergency Disks and do not need to create 
them. 


If you cannot start your computer from a CD, you can use these instructions 
to create Emergency Disks on another computer or go to 
http://www.symantec.com/techsupp/ebd.html and download the 
Emergency Disk program. Follow the instructions included in the download 
to create the Emergency Disks. 


You will need several formatted 1.44 MB disks. 


To create Emergency Disks from the CD 
1 Insert the Norton AntiVirus CD into the CD-ROM drive. 


2 Click Browse CD. 

3 Double-click the Support folder. 

4 Double-click the Edisk folder. 

5 Double-click NED.exe. 

6 Inthe welcome window, click OK. 

7 Label the first disk as instructed and insert it into drive A. 

8 Click Yes. 

9 Repeat steps 7 and 8 for the subsequent disks. 

10 When the procedure is complete, click OK. 

11 Remove the final disk from drive A and store the Emergency Disk set 


in a safe place. 
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Install Norton AntiVirus 


See “If the opening 
screen does not 
appear" on 

page 26. 


See "If you need to 
use Emergency 
Disks" on page 74. 


Install Norton AntiVirus from the Norton AntiVirus CD. 


To install Norton AntiVirus 


1 
2 


® 


3 


Insert the Norton AntiVirus CD into the CD-ROM drive. 
In the Norton AntiVirus window, click Install Norton AntiVirus. 


If your computer is not set to automatically open a CD, you will have to 
open it yourself. 


If you downloaded your copy of Norton AntiVirus and are not using a 
CD, open the Norton AntiVirus folder and click setup.exe. 


If you are installing in Windows 98, 98SE, or Me, Norton AntiVirus 
scans your computer’s memory for viruses before installing. If a virus 
is found, you are prompted to use your Emergency Disks to remove the 
virus before continuing. 


The opening installation window reminds you to close all other 
Windows programs. 


Click Next. 


J Norton åntiYirus 2003 Setup 


License Agreement 


You must agree with the license agreement 
below to proceed. 


SYMANTEC SOFTWARE LICENSE AGREEMENT 


IMPORTANT: PLEASE READ THE TERMS AND CONDITIONS OF THIS LICENSE 
AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE. SYMANTEC 
CORPORATION AND/OR ITS SUBSIDIARIES SYMANTEC”) IS WILLING TO 
LICENSE THE SOFTWARE TO YOU AS THE INDIVIDUAL, THE COMPANY, OR 
THE LEGAL ENTITY THAT WILL BE UTILIZING THE SOFTWARE (REFERENCED 
BELOW AS “YOU OR YOUR”) ONLY ON THE CONDITION THAT YOU ACCEPT 
ALL OF THE TERMS OF THIS LICENSE AGREEMENT. THIS IS A LEGAL AND 
ENFORCEABLE CONTRACT BETWEEN YOU AND SYMANTEC. BY OPENING 
THIS PACKAGE, BREAKING THE SEAL, CLICKING ON THE “AGREE” OR “YES” 
BUTTON OR OTHERWISE INDICATING ASSENT ELECTRONICALLY, OR 
TOADING THE SOFTWARE YOI AGREE. TO THE TERMS ANN CONDITIONS OF F| 


© | do not accept the license agreement 


< Back Cancel 


6 Read the License Agreement and click I accept the license 


agreement. 
If you decline, you cannot continue with the installation. 
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7 Click Next. 


is Norton AntiVirus 2003 Setup 


Upgrade Option Settings 


8 Ifyou are upgrading from Norton AntiVirus 2002, you can keep your 
option settings. Click Yes to keep the settings. 


i = Norton Anti¥irus 2003 Setup Bil xi 


f — Destination Folder 
À Select a folder where the application will be installed. 


9 Selecta folder into which you want to install Norton AntiVirus. 
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10 Click Next. 


i= Norton Anti¥irus 2003 Setup 


VF Ready to Install the Application 


11 Confirm the installation location, then click Next. 


i= Norton Anti¥irus 2003 Setup 


A nae Updating System 
$ t j 


S| 
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Install Norton AntiVirus 


See “Read the 12 
Readme file” on 
page 29. 

13 


After Norton AntiVirus is installed, scroll through the Readme text, 
then click Next. 
Pe] Norton Anti¥irus 2003 Setup iI [x] 


Norton AntiVirus 2003 has 
been successfully 
installed. 


Click the Finish button to exit this installation. 


Barcel | 


Click Finish to exit the installation. 


If the opening screen does not appear 


Som 


etimes, a computer’s CD-ROM drive does not automatically start a CD. 


To start the installation from the Norton AntiVirus CD 


1 
2 


On your desktop, double-click My Computer. 


In the My Computer dialog box, double-click the icon for your CD- 
ROM drive. 


From the list of files, double-click CDSTART.EXE. 


Installing Norton AntiVirus 
After installation 


After installation 


For Windows 98/Me, you must restart your computer after installing 
Norton AntiVirus. 


If your computer needs to be restarted after Norton AntiVirus is installed, a 
prompt appears giving you the option to do so immediately. After restart or, 
if your computer does not need to be restarted, after installation is 
complete, the Information Wizard appears. 


If you bought your computer with Norton AntiVirus already installed, the 
Information Wizard appears the first time you start Norton AntiVirus. You 
must accept the license agreement that appears in the Information Wizard 
for Norton AntiVirus to be activated. 


Restart your computer 


After installation, you may receive a prompt telling you that your computer 
needs to be restarted for the updates to take effect. 


To restart your computer 


* In the dialog box, click Yes. 
If you click No, configuration of Norton AntiVirus is not complete until 
you restart your computer. 


Use the Information Wizard 


The Information Wizard lets you register your copy of Norton AntiVirus, 
get information about the virus definition service, select post-install tasks 
to be done automatically, and review your Norton AntiVirus settings. 


If you choose not to register the software using the Information Wizard or if 
registration fails for some reason, you can register by using the Product 
Registration option on the Help menu or by using the Symantec Web site at 
www.symantec.com. On the Web site, go to the Products page for the 
registration link. 


To use the Information Wizard 
1 In the welcome window, click Next. 


2 Ifyou purchased your computer with Norton AntiVirus already 
installed, you must accept the license agreement in order to use 
Norton AntiVirus. Click I accept the license agreement, then click 
Next. 
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10 


13 
14 


In the first Registration window, select the country/region from which 
you are registering and the country/region in which you live (if 
different), then click Next. 


If you would like information from Symantec about Norton AntiVirus, 
select the method by which you want to receive that information, then 
click Next. 


Enter your name and whether you want Norton AntiVirus registered to 
you or your company, then click Next. 


Enter your address, then click Next. 


Answer the survey questions to help Symantec improve its products 
and services, then click Next when you are done or to skip the survey. 


Select whether you want to register Norton AntiVirus through the 
Internet or by mail, then click Next. 

If you submitted your registration through the Internet, a dialog box 
displays the serial number for your product. 


Write down the number or click Print to get a copy of your 
registration information for future reference. 


Click Next. 


Select whether you want to use your existing profile the next time you 
register a Symantec product, or type the information as part of 
registration. 


Click Finish. 
Review the subscription service information, then click Next. 


Select the post-install tasks that you want Norton AntiVirus to perform 
automatically. Your options are: 


Run LiveUpdate to ensure that you have the j See "Keeping current with 
latest virus definitions. LiveUpdate" on page 59. 


If you are installing in Windows 98/Me, you | See “About Rescue Disks" on 
also have the option to create a Rescue Disk | Page 36. 


set. 

Perform a full system scan. See “Manually scan disks, 
folders, and files" on page 52. 

Schedule a weekly scan of your local hard See “Schedule scans” on 

drives. You must have Microsoft Scheduler page 56. 


installed to use this option. If you select this 
option, you can change the schedule for this 
scan as desired. 
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15 Click Next. 


= Norton Anti¥irus Information Wizard 


1 Registration Summary 


2 Subscription Post-Install Tasks 
Run LiveUpdate Selected 
3 Tasks j Create a Rescue Disk set Selected 
= Scan for viruses Selected 
Selected 


ITITIVITITTT ITNT NINN! | 


4 Summary 


Configuration Settings 
Auto-Protect 

Incoming Email Scanning 
Outgoing Email Scanning 
Script Blocking 

Automatic LiveUpdate 


Ifyou would like to change your configuration settings, click 
Options on the Norton Antivirus main window. 


See “Customize 16 Review the configuration settings for Norton AntiVirus. 
OCS ANDERUS” If you want to change any of the settings, do so using Options. 


on page 40. 
17 Click Finish. 


If you selected any post-install tasks, they start automatically. 


Read the Readme file 


The Readme file contains technical tips and information about product 
changes that occurred after this guide went to press. It is installed on your 
hard disk in the same location as the Norton AntiVirus product files. 


To read the Readme file 


1 Using Windows Explorer, navigate to the location where your Norton 
AntiVirus files are installed. 
If you installed Norton AntiVirus in the default location, the files are in 
C:\Program Files\Norton AntiVirus. 


2 Double-click Readme.txt to open the file in Notepad or WordPad. 
The Readme file includes instructions for printing it if you want to do 
SO. 


3 Close the word processing program when you are done reading the 
file. 
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If you need to uninstall Norton AntiVirus 


See “If you have 
files in 
Quarantine” on 
page 70. 


If you need to remove Norton AntiVirus from your computer, you can use 
the Add/Remove Programs option from the Windows Control Panel or the 
Uninstall Norton AntiVirus option from the Programs menu. 


During uninstall, Windows may indicate that it is installing software. This 
is a standard Microsoft installation message and can be disregarded. 


To uninstall Norton AntiVirus from the Windows Control Panel 


1 


8 


Do one of the following: 

= On the Windows taskbar, click Start > Settings > Control Panel. 
= On the Windows XP taskbar, click Start > Control Panel. 

In the Control Panel, double-click Add/Remove Programs. 

In the list of currently installed programs, click Norton AntiVirus. 
Do one of the following: 

= In Windows 2000/Me, click Change/Remove. 

“= In Windows 98, click Add/Remove. 

= In Windows XP, click Change. 

Click Yes to confirm that you want to uninstall the product. 


If you have files in Quarantine, you are asked if you want to delete 
them. Your options are: 


Yes Deletes the quarantined files from your computer. 


No Leaves the quarantined files on your computer, but makes 
them inaccessible. 


Click Finish. 


made to Norton AntiVirus 2003 to take effect. Click Yes to 
restart now or No if you plan to manually restart later. 


(i) ‘You must restart your system for the configuration changes 


Click Yes to restart your computer. 
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To uninstall Norton AntiVirus from the Programs menu 


1 Do one of the following: 


== On the Windows taskbar, click Start > Programs > Norton 
AntiVirus. 


= On the Windows XP taskbar, click Start > All Programs > 
Norton AntiVirus. 


2 Click Uninstall Norton AntiVirus. 


3 Inthe Application Maintenance window, click Remove. 


If you have no other Symantec products on your computer, you should also 
uninstall LiveReg and LiveUpdate. 


To uninstall LiveReg and LiveUpdate 
1 Doone of the following: 
== On the Windows taskbar, click Start > Settings > Control Panel. 
«= On the Windows XP taskbar, click Start > Control Panel. 
2 Inthe Control Panel, double-click Add/Remove Programs. 
In the list of currently installed programs, click LiveReg. 
4 Doone of the following: 
= [n Windows 2000/Me, click Change/Remove. 
«= In Windows 98, click Add/Remove. 
«= [In Windows XP, click Remove. 


Click Yes to confirm that you want to uninstall the product. 


Repeat steps 1 through 5, selecting LiveUpdate in step 3, to uninstall 
LiveUpdate. 
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Norton AntiVirus basics include general information about how to access 
Norton AntiVirus tools, keep your computer protected, customize Norton 
AntiVirus, monitor Norton AntiVirus activities, and access more 
information about Norton AntiVirus. 


Access Norton AntiVirus tools 


Use the Norton AntiVirus main window 


Norton AntiVirus tools include status reporting, scanning options, 
scheduling options, activity reporting, and configuration options. They can 
be accessed from the Norton AntiVirus main window, the Windows 
Explorer toolbar, and the Norton AntiVirus Windows tray icon. 


Most Norton AntiVirus tools are accessible from the Norton AntiVirus main 
window. 


To start Norton AntiVirus 


% Do one of the following: 
== On the Windows taskbar, click Start > Programs > Norton 
AntiVirus > Norton AntiVirus 2003. 
== On the Windows XP taskbar, click Start > More Programs > 
Norton AntiVirus > Norton AntiVirus 2003. 
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Use the Windows Explorer toolbar 


Norton AntiVirus adds a button and menu to Windows Explorer. The button 
drops down an abbreviated Norton AntiVirus menu. 


Click the arrow to the right of the button and the following options appear. 


View Status 


View Quarantine 


View Activity Log 


View Virus Encyclopedia 


Launch Scan Menu 


Launches Norton AntiVirus, displaying the Status 
window with system status. 


Displays the Quarantine area and the files currently 
stored there. For more information, see “If you have 
files in Quarantine” on page 70. 


Displays the Log Viewer, showing you various 
Norton AntiVirus activities, such as scans 
performed and problems found. For more 
information, see “Monitoring Norton AntiVirus 
activities” on page 45. 


Connects you to the Symantec Security Response 
Web page, from which you can search for 
information on all types of viruses. 


Opens Norton AntiVirus in the Scan for Viruses 
pane, on which you can specify a scan to run. 


When you first open Windows Explorer after installing Norton AntiVirus, 
you may not see the Norton AntiVirus button and menu. 


To display the Norton AntiVirus button and menu 


% On the View menu, click Toolbars > Norton AntiVirus. 


O) You may not be able to access the Norton AntiVirus Windows Explorer 
menu, depending on your computer’s configuration. 


Use the Norton AntiVirus Windows tray icon 


See "Customize 
Norton AntiVirus" 
on page 40. 


You can use the Norton AntiVirus icon in the Windows tray to open Norton 
AntiVirus, and enable or disable Auto-Protect. 


To use the Norton AntiVirus Windows tray icon 


1 Inthe Windows tray, right-click the Norton AntiVirus icon. 


2 On the tray icon menu, select the option that you want. 
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Temporarily disable Auto-Protect 


See “Customize If you have not changed the default option settings, Auto-Protect loads 

ie ia when you start your computer to guard against viruses. It checks programs 
for viruses as they are run and monitors your computer for any activity that 
might indicate the presence of a virus. When a virus or virus-like activity is 
detected, Auto-Protect alerts you. 


In some cases, Auto-Protect may warn you about a virus-like activity that 
you know is not the work of a virus. If you will be performing such an 
activity and want to avoid the warning, you can temporarily disable Auto- 
Protect. 


O) If you have set a password for Options, Norton AntiVirus asks you for the 
password before you can view or adjust the settings. 


To temporarily disable Auto-Protect 
See "Access Norton 1 Start Norton AntiVirus. 
AntiVirus tools" on o. , , , 
page 33. 2 Inthe Norton AntiVirus main window, click Options. 
3 Inthe Options window, under System, click Auto-Protect. 


4 Inthe Auto-Protect pane, uncheck Enable Auto-Protect. 


Be sure to enable Auto-Protect when you have completed your task to 
ensure that your computer remains protected. 


To enable Auto-Protect 
1 Start Norton AntiVirus. 


2 Inthe Norton AntiVirus main window, click Options. 


3 Inthe Options window, under System, click Auto-Protect. 


4 Inthe Auto-Protect pane, check Enable Auto-Protect. 


If the Norton AntiVirus icon appears in the Windows tray, you can use it to 
enable and disable Auto-Protect. 


To enable or disable Auto-Protect using the tray icon 
1 Inthe Windows tray, right-click the Norton AntiVirus icon. 


2 Doone of the following: 
«= If Auto-Protect is disabled, click Enable Auto-Protect. 
«= If Auto-Protect is enabled, click Disable Auto-Protect. 
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Maintain Norton AntiVirus protection 


See “If you need to 
use Rescue Disks 
(Windows 98/98SE/ 
Me)" on page 72. 


Depending upon which operating system you are using, you may want to 
keep a set of Rescue Disks available and keep them up-to-date. You should 
also occasionally verify that Norton AntiVirus is set to provide you with 
optimal protection, and make sure that your virus protection is current. 


About Rescue Disks 


See "If you need to 
use Rescue Disks 
(Windows 98/98SE/ 
Me)" on page 72. 


© 


Rescue Disks record a duplicate set of system startup files and disk 
partition information, and store rescue items and a virus scanner across 
multiple floppy disks or on a network drive. Rescue Disks can be made for 
the Windows 98/Me operating systems. 


A Rescue Disk set consists of one bootable floppy disk, one Norton 
AntiVirus Program floppy disk, and several Virus Definition floppy disks. If 
you have Norton Utilities installed, you will also have two Norton Utilities 
floppy disks in your Rescue Disk set. With a Rescue Disk set, you can start 
your computer in DOS mode and use Norton AntiVirus to fix virus-related 
problems. 


Rescue Disks contain information specific to the computer on which they 
were made. If you are using Rescue Disks for recovery, you must use the 
disks made for your computer. If you are using Rescue Disks to scan for 
viruses, you can use disks made for a different computer. 


Disks can and should be updated whenever you update your virus 
protection, install new software, or make changes to your hardware. 


Create a Rescue Disk set 


See “Temporarily 
disable Auto- 
Protect” on 

page 35. 


& 


Rescue Disks can be created at any time. If you have chosen to create 
Rescue Disks as a post-install task in the Information Wizard, the Rescue 
Disk Wizard appears automatically. Otherwise, you can start the Rescue 
Disk Wizard from the Norton AntiVirus main window. 


If you start the Rescue Disk Wizard from the Norton AntiVirus main 
window, temporarily disable Auto-Protect while you are creating the 
Rescue Disk set. If you do not restart your computer after creating Rescue 
Disks, remember to enable Auto-Protect again. 


You will need several formatted 1.44 MB disks. 
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To create Rescue Disks 
1 Start Norton AntiVirus. 


2 Inthe Norton AntiVirus main window, click Rescue. 
If you chose to make Rescue Disks as a post-install task, the Rescue 
Disk Wizard opens automatically. 


Select drive A to create the Rescue Disk set. 
4 Click Create. 


Label the disks as specified in the Basic Rescue Disk List window, then 
click OK. 


6 Insert the disks as requested. 


Test your Rescue Disks 


At the end of the Create Rescue Disks process, you are prompted to test 
your disks. This requires that you restart your computer using the Rescue 
Disks. 


To test your Rescue Disks 
1 Close all open Windows programs. 


2 Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A, 
then click Restart. 


See “My Rescue If the Rescue Disk screen appears on your monitor, the Rescue Disk 
rare ec aA s works properly. If the Rescue Disk screen does not appear, you have 
several options for correcting the problem. 


Press Escape to exit to DOS. 


4 Remove the disk from drive A, then slide open the plastic tab on the 
back of the disk to write-protect it. 


5 Restart your computer. 


Update your Rescue Disks 


You can update your Rescue Disks as often as you like. The Rescue Disk 
Wizard helps you to update your basic Rescue Disks without having to 
recreate them. 


If you are updating a floppy disk set, make sure your disks are not write- 
protected before you begin. 
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To update your Rescue Disks 

1 Start Norton AntiVirus. 

In the Norton AntiVirus main window, click Rescue. 
Under Select Destination Drive, select drive A. 

Click Update. 


Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A. 
If the disk is write-protected, slide the plastic tab closed to make it 
writeable. 


6 Click OK. 


uu FF WN 


7 Insert the remaining disks in your set as requested. 


See “Test your Make sure to test your newly updated Rescue Disk set when prompted. 
Rescue Disks" on 
page 37. 


Check system status 


If Norton AntiVirus is behaving in an unexpected way, or if you’re not sure 
that everything is being scanned for viruses, check the status of its 
configuration. 


In the Status pane of the Norton AntiVirus main window, a check mark 
indicates that the system status is OK and a triangle indicates that your 
system needs attention. If you see a triangle, review the features and 
services to see which area needs attention. 

See “Customize If you need to adjust any settings, use Options. 


Norton AntiVirus" 
on page 40. 
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To check system status 


See “Access Norton 1 Start Norton AntiVirus. 
AntiVirus tools” on 


Page 33. 


a Norton Anti¥irus 
by a J) 
System Status: OK @ 


Status 4 Security Scanning Features 
Scan for Viruses © Auto-Protect On 
Reports @ Email Scanning On anat 
= least once a week, to i 
© Script Blocking On ensure that your 
syst irus- 
® Full System Scan 7126/02 free. 
bMore Info 
Virus Definition Service 
®© Virus Definitions 7124102 
®© Subscription Service 7127103 
®© Automatic LiveUpdate On 
Norton AntiVirus 2003 


2 Inthe Status pane, review the status to the left of each feature. 


3 For more information about a particular feature, click the feature. 
The right pane displays a description and a link to more information 
about the feature. 


Check Office Plug-in status 


Office Plug-in protects Microsoft Office documents from viruses, worms, 
and virus-like activities. It scans those documents whenever you open 
them in a Microsoft Office program. Office Plug-in is enabled in Options. 


O) If you have set a password for Options, Norton AntiVirus asks you for the 
password before you can view or adjust the settings. 


To check Office Plug-in status 
See "Access Norton 1 Start Norton AntiVirus. 


AntiVirus tools" on ah i . . , 
page 33. 2 Inthe Norton AntiVirus main window, click Options. 
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3 Inthe left pane of the Options window, under Other, click 
Miscellaneous. 


4 Verify that Office Plug-in is enabled. 


Customize Norton AntiVirus 


If you are using Windows 2000/XP and you do not have Local 
Administrator access, you cannot change Norton AntiVirus options. If you 
are an administrator and share your computer with others, keep in mind 
that the changes you make apply to everyone using the computer. 


The default settings for Norton AntiVirus provide complete virus protection 
for your computer. However, you may want to adjust them to optimize 
system performance or disable options that do not apply. 


Norton AntiVirus provides password protection for your option settings. 
You can enable, change, and reset a password so unauthorized users 
cannot tamper with your settings. 


All the settings for Options are organized into three main categories. The 
options contained under each category are as follows. 


Internet Email 


= Advanced 


Instant Messenger 


LiveUpdate 


Norton AntiVirus basics 
Customize Norton AntiVirus 


See “Change This section does not describe how to change the individual options, but 
peer cia gives a general description of what they do and how you can find them. For 
page 43. specific information about a particular option, check the online Help. 


About System options 


The System options control scanning and monitoring of your computer. You 
use System options to determine what gets scanned, what the scan is 
looking for, and what happens when a virus or virus-like activity is 


encountered. 


With higher levels of protection, there can be a slight trade-off in computer 
performance. If you notice a difference in your computer’s performance 
after you install Norton AntiVirus, you may want to set protection to a 
lower level or disable those options that you do not need. 


Option 


Description 


Auto-Protect 


Script Blocking 


Manual Scan 


Determine if Auto-Protect starts when you start your 
computer, what it looks for while monitoring your computer, 
and what to do when a virus is found. 


Bloodhound is the scanning technology that protects against 
unknown viruses. Use these options to set its level of 
sensitivity in Auto-Protect. 


Advanced options determine the activities to be monitored 
when scanning for virus-like activities and when scanning 
floppy disks. 


Exclusions specify the files that should not be scanned by file 
name extension or by specific file name. Be careful not to 
exclude the types of files that are more likely to be infected 
by viruses such as files with macros or executable files. 


Enable Script Blocking and set what Norton AntiVirus should 
do if it finds a malicious script. If you are developing or 
debugging scripts, disable Script Blocking. Otherwise this 
eature might block the script you are developing. 


Determine what gets scanned and what happens if a virus is 
found during a scan that you request. 


Manual Scan options also include Bloodhound and 
Exclusions subcategories. 


[A] 
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About Internet options 


Internet options define what happens when your computer is connected to 
the Internet. You use Internet options to define how Norton AntiVirus 
should scan email and instant messenger attachments, enable Worm 
Blocking, and determine how LiveUpdates should be applied. 


Instant Messenger | Determine what instant messengers to support, how to 
configure a new IM, and what happens if a virus is found 
during an instant messenger session. 
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About Other options 


Other options include Inoculation settings for Windows 98/98SE/Me and 
Miscellaneous settings. You can enable Inoculation, cause an alert if a 
system file changes, and set a variety of miscellaneous options. 


Miscellaneous Back up file in Quarantine before attempting a repair. (This 
option is automatically set to On.) 


Enable Office Plug-in. If you upgrade to Microsoft Office 2000 
or later after Norton AntiVirus is installed, you must enable 
this option to automatically scan Microsoft Office files. 


Alert me if my virus protection is out of date. 
Scan files at system startup (Windows 98/98SE only). 
Enable password protection for options. 


Change Norton AntiVirus options 


You change the settings for Norton AntiVirus options in the Options 
window. 


To change settings 


See "Access Norton 1 Start Norton AntiVirus. 
AntiVirus tools” on Pe N : , 7 
page 33. 2 Inthe Norton AntiVirus main window, click Options. 
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O) If you set a password for Options, Norton AntiVirus asks you for the 
password before you can continue. 


= Norton AntiVirus Options 


Script Blocking 
> Manual Scan How to stay protected 


W Enable Auto-Protect (recommended) 


Internet 
> Email IV Start Auto-Protect when Windows starts up (recommended) 
Instant Messenger M Show the Auto-Protect icon in the tray 
LiveUpdate 


How to respond when a virus is found 


Other 
Inoculation 
Miscellaneous 


© Automatically repair the infected file (recommended) 
© Try to repair then quarantine if unsuccessful 

© Deny access to the infected file 

© Ask me whatto do 


Which file types to scan for viruses 


© Comprehensive file scanning (recommended) 


© Scan files using SmartScan Customize, 


3 Inthe Options window, in the left pane, click an option in the list. 
Options with an arrow to the left have sub-options. As you click an 
option, the corresponding settings for the selected option appear in the 


right pane. 
See “Customize 4 Select any settings you want to change. 
Norton AntiVirus" 
on page 40. 5 Click OK. 


These settings now take precedence over the preset options. The 
changes take effect immediately. 


If you need to restore default settings in Options 


You can change any or all of the options listed. If you have made a number 
of changes that have unwanted results, you can restore all options to the 
default settings. 


O) If you set a password for Options, Norton AntiVirus asks you for the 
password before you can view or adjust the settings. 
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To restore default settings on an Options page 


“On the page for which you want to restore default settings, click Page 
Defaults. 


To restore default settings for all options 


“On any page in the Options window, click Default All. 


Password protect Norton AntiVirus options 


You can choose to protect or remove protection from your option settings 
with a password. If you specify a password, you are asked to enter a 
password every time you view the Options window, or temporarily enable 
or disable Auto-Protect. 


If you forget your password, you can reset it from the Help button in the 
Norton AntiVirus main window. Check online Help for more information 
about resetting your password. 


To specify or remove a password 

1 Start Norton AntiVirus. 

In the Norton AntiVirus main window, click Options. 

In the Options window, under Other, click Miscellaneous. 
Check or uncheck Enable password protection for options. 
In the password dialog box, enter a password. 

Click OK. 
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Monitoring Norton AntiVirus activities 


Occasionally, you may need to look at previous Norton AntiVirus activities, 
such as when the last system scan was done or how many viruses were 
detected last week. Norton AntiVirus displays a record of its virus 
detection, application, and error activities in the Log Viewer. 


Check the Activity Log to see what tasks Norton AntiVirus has performed 
and the results of those tasks to make sure your Options settings are set 
correctly for your particular needs. 


To check activities 
1 Start Norton AntiVirus. 


2 Inthe Norton AntiVirus main window, click Reports. 
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3 Inthe Reports pane, on the Activity Log line, click View Report. 


E Log Viewer BEES 
File Log Edit Help 


x od ¥ AO 


EMD Norton Antivirus Item Type 
a Virus alerts 7/19/02 5:34:44 PM Virus scanner Dir ILA Quarantined 
W Application activitie | 7/19/02 5:34:44 PM Virus scanner Jeru.1808.Frere Quarantined 
W Eros 7/19/02 5:34:44 PM Virus scanner Cascade (1) Quarantined 
7/19/02 5:34:44 PM Virus scanner W97M.YMPCK1... Repaired 
7/19/02 5:34:44 PM Virus scanner Another World. 7. Repaired 
7/19/02 5:34:44 PM Virus scanner DSCE.2100 Quarantined 
7/19/02 5:34:44 PM Virus scanner WM.Bandung.A Repaired 
7/19/02 5:34:44 PM Virus scanner Necropolis.A/B Quarantined 
7/19/02 5:34:44 PM Virus scanner XM.Laroux. CV Repaired 


Source: DIR2.COM 

Description: The compressed file DIR2.COM within 
C:\temp\ ACCEPTANCE zip is infected with the Dir II.A virus 
Click for more information about this virus : Dir ILA 


| This category contains the list of detected viruses and other malicious activities. 


4 Inthe left pane, click the log you want to review. 
As you Click each log, the right pane changes and displays information 
specific to the particular log. The most recent activities appear at the 
top of the log. 


For more information 


Norton AntiVirus provides glossary terms, online Help, this User’s Guide in 
PDF format, tutorials on the Web, and links to the Knowledge Base on the 
Symantec Web site. 


Look up glossary terms 


Technical terms that are italicized in the User’s Guide are defined in the 
glossary, which is available in both the User’s Guide PDF and Help. In both 
locations, clicking a glossary term takes you to its definition. 
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Use online Help 


Help is always available throughout Norton AntiVirus. Help buttons or 
links to more information provide information specific to the task you are 
completing. The Help menu provides a comprehensive guide to all product 
features and tasks you can complete. 
To access the Help menu 
1 Start Norton AntiVirus. 
2 At the top of the Norton AntiVirus main window, click Help. 

Online Help table of ——— Norton Antivirus Help 

contents and index 


Product Registration 


Help and Support 
Symantec Response Center [—— Link to Symantec 
g A Web sites for more 
Version, system, and More Symantec Solutions  _] arnan 
password reset 
information ——————_—- About Norton Antivirus 


3 Onthe main Help menu, click Norton AntiVirus Help. 


4 In the Help window, in the left pane, select a tab. Your options are: 


Contents Displays the Help by topic 
Index Lists Help topics in alphabetical order by key word 
Search Opens a search field where you can enter a word or phrase 


Help for Norton AntiVirus dialog boxes 


When you request Help while working in a Norton AntiVirus dialog box, 
the Help displayed is specific to that dialog box. 


To get Help for a Norton AntiVirus dialog box 
% In the dialog box, click Help. 


Help for a specific task 


Online Help also explains procedures that you are likely to perform using 
Norton AntiVirus. You can access these topics from the main Help window. 
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To get Help for a task 
1 Start Norton AntiVirus. 
In the Norton AntiVirus main window, click Help. 


On the main Help menu, click Norton AntiVirus Help. 
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In the Help window, in left pane, select a tab. Your options are: 


Contents Search for Help by topic. 


Index Lists Help topics in alphabetical order by key word. 


Search Enter and search for Help by key word. 


The Contents, Index, and Search tabs are also available in many other Help 
windows and can always be used to search for Help. 


Use the User's Guide PDF 


This User’s Guide is provided on the Norton AntiVirus CD in PDF format. 
You must have Adobe Acrobat Reader installed on your computer to read 
the PDF. 


To install Adobe Acrobat Reader 

1 Insert the Norton AntiVirus CD into the CD-ROM drive. 
Click Browse CD. 

Double-click the Manual folder. 

Double-click the Acrobat folder. 

Double-click ARSOOENU. 
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Follow the on-screen instructions to select a folder for Adobe Acrobat 
Reader and complete the installation. 


Once you have installed Adobe Acrobat Reader, you can read the PDF from 
the CD. 


To read the User's Guide PDF from the CD 

1 Insert the Norton AntiVirus CD into the CD-ROM drive. 
Click Browse CD. 

Double-click the Manual folder. 

Double-click the NAV2003 folder. 

Double-click NAV2003.pdf. 
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You can also copy the User’s Guide to your hard disk and read it from there. 
It needs approximately 1 MB of disk space. 


To read the User's Guide from your hard disk 
1 Open the location into which you copied the PDF. 
2 Double-click NAV2003.pdf. 


About Norton AntiVirus on the Web 


The Symantec Web site provides extensive information about Norton 
AntiVirus, virus protection, antivirus technology, and other Symantec 
products. There are several ways to access the Symantec Web site. 


To access the Symantec Web site from the Norton AntiVirus main 
window 


1 Click Help. 


2 Select the solution that you want. Your options are: 


Help and Takes you to the technical support page of the Symantec 
Support Web site, from which you can search for solutions to 
specific problems, update your virus protection, and read 
the latest information about antivirus technology. 


Symantec Takes you to the Symantec security response page of the 
Response Center | Symantec Web site, from which you can get the latest virus 
threats and security updates. 


More Symantec | Takes you to the Symantec store page of the Symantec Web 
Solutions site, from which you can get the latest product information 
and shop for Symantec products. 


The Reports pane of Norton AntiVirus contains a link to the Symantec 
online virus encyclopedia. 


To access the Symantec Web site from the Reports page 
1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Reports. 


3 Inthe Reports pane, next to the Online Virus Encyclopedia heading, 
click View Report. 


There is a link to the Symantec Web site on the Windows Explorer toolbar. 
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To access the Symantec Web site from Windows Explorer 
1 Open Windows Explorer. 


2 On the toolbar, on the Norton AntiVirus menu, click View Virus 
Encyclopedia. 
This option connects you to the Symantec security response Web page, 
from which you can search for information on all types of viruses. 


You can always access the Symantec Web site through your Internet 
browser. 


To access the Symantec Web site in your browser 


% Point your browser to www.symantec.com 


Explore online tutorials 


Symantec provides online tutorials that you can use to review many 
common tasks that Norton AntiVirus performs. 


To explore the online tutorials 
1 Point your browser to www.symantec.com/techsupp/tutorials.html 


2 On the tutorials Web page, select the product and version for which 
you want a tutorial. 


Click continue. 


4 Inthe list of available tutorials for your product, select the one that you 
want to review. 


Protecting disks, 
files, and data from 
viruses 


Keeping your computer protected requires regular monitoring by Auto- 
Protect, Script Blocking, and Worm Blocking; scanning of your email 
attachments and files transferred by instant messenger; and frequent 
system scans. All of these tasks can be set to occur automatically. 


For added protection in Norton AntiVirus on Windows 98/98SE/Me, enable 
inoculation to alert you if a system file changes. 


Ensure that protection settings are enabled 


Norton AntiVirus is configured to provide you with complete protection 
against viruses. It is unlikely that you need to change any settings. 
However, for maximum protection, you should ensure that your protection 
features are enabled. 


Feature Where to set Maximum protection setting 

Auto-Protect Norton AntiVirus main | Auto-Protect is set to On. 
window > Enable 

Email scanning Options > Email Scan incoming Email and 
See “About Internet Scan outgoing Email are 


checked. 


If your email program uses one 
of the supported 
communications protocols, both 
options are selected by default. 


options” on page 42. 
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Feature 


Protecting disks, files, and data from viruses 
Manually scan disks, folders, and files 


Where to set 


Maximum protection setting 


Timeout protection 


Instant messenger 
scanning 


Worm Blocking 


Script Blocking 


Inoculation 


Options > Email 
See “About Internet 


options” on page 42. 


Options > Instant 
Messenger 


See “About Internet 


options” on page 42. 


Options > Email 
See “About Internet 


options” on page 42. 


Options > Script 
Blocking 


See “About System 
options” on page 41. 


Options > Inoculation 
See “About Other options” 


on page 43. 


Protect against timeouts 
when scanning Email is 
checked. 


To prevent connection timeouts 
while receiving large 
attachments, enable timeout 
protection. 


Instant messengers that you 
want to protect are checked. 


Enable Worm Blocking and 
Alert me when scanning 
email attachments are 
checked. 


Enable Script Blocking is 
checked. 


Inoculate Boot Records is 
checked. 


This table summarizes the maximum protec 


ion settings and where you 


can find them. For specific information about an option, check the online 


Help. 


Manually scan disks, folders, and files 


If Auto-Protect is enabled and the Norton AntiVirus options are set at their 
default levels, you normally would not need to scan manually. However, if 
you temporarily disabled Auto-Protect (for example, to load or use another 
program that conflicts with Norton AntiVirus), and you forgot to enable it 

again, it is possible that a virus could be on your hard disk undetected. You 
can scan your entire computer, or individual floppy disks, drives, folders, or 


files. 


Although the default settings for manual scanning are usually adequate, 
you can raise the level of Bloodhound heuristics or adjust the options for 
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manual scanning in the Options window. Check online Help for more 
information about manual scanning options. 


Perform a full system scan 
A full system scan scans all boot records and files on your computer. 


To perform a full system scan 
1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Scan for Viruses. 


= Norton AntiVirus 


Scan for Viruses 


Status Task Task Schedule 
Scan for Viruses q (I Scan my computer 
EAS == | | gm Scan ali removable drives 
fa) Scan all floppy disks 
8 Scan drives 
Scan folders 
in Scan files Double click to launch the scan 
Actions Schedule Task 
>Scan >New > > > Schedule 


Norton AntiVirus2003 


In the Scan for Viruses pane, click Scan my computer. 


4 Under Actions, click Scan. 
When the scan is complete, a scan summary appears. 


5 When you are done reviewing the summary, click Finished. 


Scan individual elements 


Occasionally, you may want to scan a particular file, removable drives, a 
floppy disk, any of your computer’s drives, or any folders or files on your 
computer. You may have been working with floppy disks or have received a 
compressed file in an email message and suspect a virus. You can scan just 
a particular disk or individual element that you want to check. 
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To scan individual elements 
1 Start Norton AntiVirus. 
In the Norton AntiVirus main window, click Scan for Viruses. 


In the Scan for Viruses pane, select the scan that you want to run. 


FWN 


Under Actions, click Scan. 

If you choose to scan all removable drives or a floppy disk, the scan 
starts automatically. If you choose to scan drives, folders, or files, a 
dialog box appears in which you choose which drives, folders, or files 
to scan. 


5 Inthe dialog box, click Scan after making your selection. 
When the scan is complete, a scan summary appears. 


6 When you are done reviewing the summary, click Finished. 


If problems are found during a scan 


See “If a virus is 
found during a 
scan” on page 65. 


At the end of a scan, a summary report appears to tell you what Norton 
AntiVirus found during the scan. If a virus was found and you have 
requested that Norton AntiVirus repair the file automatically, it is listed as 
repaired. If the file cannot be repaired, it can be quarantined or deleted. 


Create and use custom scans 


See “Schedule a 
custom scan" on 
page 56. 


You can create a custom scan if you regularly scan a particular segment of 
your computer and don’t want to have to specify the segment to be scanned 
every time. You can also schedule the custom scan to run automatically. 


You can delete the scan when it is no longer necessary. For example, if you 
are working on a project for which you need to frequently swap files with 
others, you might want to create a folder into which you copy and scan 
those files before using them. When the project is done, you can delete the 
custom scan for that folder. 


To create a custom scan 
1 Start Norton AntiVirus. 
In the Norton AntiVirus main window, click Scan for Viruses. 


In the Scan for Viruses pane, under Actions, click New. 


FUN 


In the opening window of the Norton AntiVirus Scan Wizard, click 
Next. 
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5 Doone or both of the following: 
«= To select individual files to be scanned, click Add files. 


a To select folders and drives to be scanned, click Add folders. 
You can use both options to select the combination of items that you 
want. 


6 Inthe resulting dialog box, select the items that you want to scan. 
If you select a folder, all files in that folder are included. If you select a 
drive, all folders and files on that drive are included. 


7 Add the selected items to the list of items to scan by doing one of the 
following: 


«= [n the Scan Files dialog box, click Open. 
«= [n the Scan Folders dialog box, click Add. 


8 Toremove an item from the list, select it, then click Remove. 
9 When you are done creating the list of items to be scanned, click Next. 


10 Type a name for the scan by which you can identify it in the list of 
scans. 


11 Click Finish. 


Run a custom scan 


When you run a custom scan, you do not have to redefine what you want to 
scan. 


To run a custom scan 
1 Start Norton AntiVirus. 
In the Norton AntiVirus main window, click Scan for Viruses. 


In the Scan for Viruses pane, select the custom scan. 
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Under Actions, click Scan. 
When the scan is complete, a scan summary appears. 


5 When you are done reviewing the summary, click Finished. 


Delete a custom scan 
You can delete custom scans if they are no longer needed. 


To delete a custom scan 
1 Start Norton AntiVirus. 


2 Inthe Norton AntiVirus main window, click Scan for Viruses. 
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3 Inthe Scan for Viruses pane, select the scan that you want to delete. 


O) If you click the button next to the scan name, the scan runs. 


4 Under Actions, click Delete. 


Click Yes to verify that you want to delete the scan. 


Schedule scans 


& 


When you install Norton AntiVirus and complete the Information Wizard, 
you can choose to schedule a weekly full system scan as part of post-install 
tasks. If you make that choice, the scan is scheduled automatically. 


You can schedule customized virus scans that run unattended on specific 
dates and times or at periodic intervals. If you are using the computer when 
the scheduled scan begins, it runs in the background so that you do not 
have to stop working. 


You cannot schedule the predefined scans in the scan list, but you can 
schedule any custom scans that you have created. 


Schedule a custom scan 


You have complete flexibility in scheduling custom scans. When you select 
how frequently you want a scan to run (such as daily, weekly, or monthly), 
you are presented with additional fields with which you can refine your 
request. For example, you can request a daily scan, then schedule it to 
occur every two days or every three days instead. 


To schedule a custom scan 
1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Scan for Viruses. 


3 Inthe Scan for Viruses pane, select the scan that you want to 
schedule. 


O) If you click the button next to the scan name, the scan runs. 


4 Under Schedule Task, click Schedule. 


5 Inthe Schedule dialog box, if Show multiple schedules is checked, 
click New to enable the scheduling fields. 
If it is not checked, the fields are already enabled. 
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6 Set the frequency and time at which you want the scan to run. 
Most of the frequency options include additional options that let you 
further refine the schedule. Set the additional options as necessary. 


7 When you are done, click OK. 


You can also create multiple schedules for a scan. For example, you could 
run the same scan at the beginning of your work day and at the end. 


To create multiple schedules for a single scan 
1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Scan for Viruses. 


3 Inthe Scan for Viruses pane, select the scan that you want to 
schedule. 


O) If you click the button next to the scan name, the scan runs. 
4 Under Schedule Task, click Schedule. 
5 Inthe Schedule dialog box, check Show multiple schedules. 
6 Toset an additional schedule, click New. 
7 


Set the frequency and time at which you want the scan to run. 
Most of the frequency options include additional options that let you 
further refine the schedule. Set the additional options as necessary. 


8 When you are done, click OK. 


Edit scheduled scans 


You can change the schedule of any scheduled scan, including the weekly 
full system scan. 


To edit a scheduled scan 
1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Scan for Viruses. 


3 Inthe Scan for Viruses pane, select the scan that you want to 
schedule. 


O) If you click the button next to the scan name, the scan runs. 
4 Under Schedule Task, click Schedule. 
Change the schedule as desired. 


Click OK. 
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Delete a scan schedule 


You can delete any scan schedule. Deleting the schedule does not delete 
the scan. 


To delete a scan schedule 

1 Start Norton AntiVirus. 

2 Inthe Norton AntiVirus main window, click Scan for Viruses. 

3 Inthe Scan for Viruses pane, select the scan you want to schedule. 
O) If you click the button next to the scan name, the scan runs. 
Under Schedule Task, click Schedule. 

In the Schedule dialog box, check Show multiple schedules. 
Select the schedule that you want to delete (if more than one). 
Click Delete. 

Click OK. 
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Symantec products depend on current information to protect your 
computer from newly discovered threats. Symantec makes this information 
available to you through LiveUpdate. Using your Internet connection, 
LiveUpdate obtains program updates and protection updates for your 
computer. 


Your normal Internet access fees apply when you use LiveUpdate. 


O) If you are using Norton AntiVirus on Windows 2000/XP, you must have 
Administrator access rights to run LiveUpdate. 


About program updates 


Program updates are minor improvements to your installed product. These 
differ from product upgrades, which are newer versions of entire products. 
Program updates that have self-installers to replace existing software code 
are called patches. Patches are usually created to extend operating system 
or hardware compatibility, adjust a performance issue, or fix bugs. 


LiveUpdate automates the process of obtaining and installing program 
updates. It locates and obtains files from an Internet site, installs them, and 
then deletes the leftover files from your computer. 
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About protection updates 


Protection updates are files available from Symantec, by subscription, that 
keep your Symantec products up-to-date with the latest anti-threat 
technology. The protection updates you receive depend on which product 
you are using. 


Norton AntiVirus, Users of Norton AntiVirus and Norton SystemWorks 
Norton SystemWorks | receive virus definition service updates, which provide 
access to the latest virus signatures and other technology 
from Symantec. 


Norton Internet In addition to the virus definition service, users of Norton 

Security Internet Security also receive protection updates to the 
Web filtering service, the intrusion detection service, and 
Spam Alert. 


The Web filtering service updates provide the latest lists of 
Web site addresses and Web site categories that are used 
to identify inappropriate Web content. 


The intrusion detection service updates provide the latest 
predefined firewall rules and updated lists of applications 
that access the Internet. These lists are used to identify 
unauthorized access attempts to your computer. 


Spam Alert updates provide the latest spam definitions 
and updated lists of spam email characteristics. These lists 
are used to identify unsolicited email. 


Norton Personal Users of Norton Personal Firewall receive intrusion 

Firewall detection service updates for the latest predefined firewall 
rules and updated lists of applications that access the 
Internet. 


About your subscription 


See “Subscription Your Symantec product includes a complimentary, limited-time 

ee subscription to protection updates for the subscription services that are 
used by your product. When the subscription is due to expire, you are 
prompted to renew your subscription. 


If you do not renew your subscription, you can still use LiveUpdate to 
obtain program updates. However, you cannot obtain protection updates 
and will not be protected against newly discovered threats. 
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When you should update 


Run LiveUpdate as soon as you have installed your product. Once you know 
that your files are up-to-date, run LiveUpdate regularly to obtain updates. 
For example, to keep your virus protection current, you should use 
LiveUpdate once a week or whenever new viruses are discovered. Program 
updates are released on an as-needed basis. 


Request an update alert 


If you run 


To ensure your protection updates are current, you can request to receive 
an email alert whenever there is a high-level virus outbreak or other 
Internet security threat. The email alert describes the threat, provides 
detection and removal instructions, and includes advice on keeping your 
computer safe. You should always run LiveUpdate after you receive one of 
these alerts. 


To request an update alert 


1 From your Web browser, navigate to securityresponse.symantec.com/ 
avcenter 

2 On the Security Response Web page, scroll to the bottom of the page, 
then click Symantec security response Free subscription. 


3 On the security alert subscription Web page, fill in the subscription 
form. 


4 Click Send me FREE Security Alerts. 


LiveUpdate on an internal network 


If you run LiveUpdate on a computer that is connected to a network that is 
behind a company firewall, your network administrator might set up an 
internal LiveUpdate server on the network. LiveUpdate should find this 
location automatically. 


If you have trouble connecting to an internal LiveUpdate server, contact 
your network administrator. 


If you can't use LiveUpdate 


When new updates become available, Symantec posts them on the 
Symantec Web site. If you can’t run LiveUpdate, you can obtain new 
updates from the Symantec Web site. 
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Your subscription must be current to obtain new protection updates from 
the Symantec Web site. 


To obtain updates from the Symantec Web site 
1 Point your Web browser to securityresponse.symantec.com 


2 Follow the links to obtain the type of update that you need. 


Obtain updates using LiveUpdate 


& 


& 


LiveUpdate checks for updates to all of the Symantec products that are 
installed on your computer. 


If you connect to the Internet through America Online (AOL), CompuServe, 
or Prodigy, connect to the Internet first, and then run LiveUpdate. 


To obtain updates using LiveUpdate 
1 Open your Symantec product. 


2 ‘At the top of the window, click LiveUpdate. 
You might receive a warning that says that your subscription has 
expired. Follow the on-screen instructions to complete the 
subscription renewal. 


3 Inthe LiveUpdate window, click Next to locate updates. 
4 If updates are available, click Next to download and install them. 


5 When the installation is complete, click Finish. 


Some program updates may require that you restart your computer after 
you install them. 


Set LiveUpdate to Interactive or Express mode 


LiveUpdate runs in either Interactive or Express mode. In Interactive mode 
(the default), LiveUpdate downloads a list of updates available for your 
Symantec products that are supported by LiveUpdate technology. You can 
then choose which product updates you want to install. In Express mode, 
LiveUpdate automatically installs all available updates for your Symantec 
products. 
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To set LiveUpdate to Interactive or Express mode 
1 Open your Symantec product. 
At the top of the window, click LiveUpdate. 


On the LiveUpdate welcome screen, click Configure. 
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On the General tab of the LiveUpdate Configuration dialog box, select 
Interactive Mode or Express Mode. 


5 If you selected Express Mode, select how you want to start checking 
for updates: 


== To have the option of cancelling the update, select I want to 
press the start button to run LiveUpdate. 


== To have any updates installed automatically whenever you start 
LiveUpdate, select I want LiveUpdate to start automatically. 


6 Click OK. 


Turn off Express mode 


Once you have set LiveUpdate to run in Express mode, you can no longer 
access the LiveUpdate Configuration dialog box directly from LiveUpdate. 
You must use the Symantec LiveUpdate control panel. 


To turn off Express mode 
1 On the Windows taskbar, click Start > Settings > Control Panel. 
2 Inthe Control Panel window, double-click Symantec LiveUpdate. 


3 On the General tab of the LiveUpdate Configuration dialog box, select 
Interactive Mode. 


4 Click OK. 


Run LiveUpdate automatically 


You can have LiveUpdate check for protection updates automatically, on a 
set schedule, by enabling Automatic LiveUpdate. You must continue to run 
LiveUpdate manually to receive product updates. 


O) Automatic LiveUpdate checks for an Internet connection every five 
minutes until a connection is found, and then every four hours. If you have 
an ISDN router that is set to automatically connect to your Internet service 
provider (ISP), many connections will be made, with connection and phone 
charges possibly being incurred for each connection. If this is a problem, 
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you can set your ISDN router to not automatically connect to the ISP or 
disable Automatic LiveUpdate in the Norton AntiVirus options. 


To enable Automatic LiveUpdate 


1 


& 


6 


Start Norton AntiVirus. 


In the Norton AntiVirus main window, click Options. 


If you set a password for Options, Norton AntiVirus asks you for the 
password before you can continue. 


In the Options window, under Internet, click LiveUpdate. 
In the LiveUpdate pane, check Enable Automatic LiveUpdate. 


Set how you want updates to be applied. Your options are: 


Apply updates without | LiveUpdate checks for and installs protection 
interrupting me updates without prompting you. LiveUpdate 
displays an alert when a protection update has 
been downloaded. You should still run LiveUpdate 
occasionally to check for program updates. 


Notify me when updates | LiveUpdate checks for protection updates and asks 
are available if you want to install them. 


Click OK. 


To delete the schedule for Automatic LiveUpdate, disable Automatic 
LiveUpdate. 


To disable Automatic LiveUpdate 


Start Norton AntiVirus. 


In the Norton AntiVirus main window, click Options. 


If you set a password for Options, Norton AntiVirus asks you for the 
password before you can continue. 


In the Options window, under Internet, click LiveUpdate. 
In the LiveUpdate pane, uncheck Enable Automatic LiveUpdate. 
Click OK. 


If Norton AntiVirus finds a virus on your computer, there are three possible 
resolutions to the problem: 


= Fix the file 
Removes the virus from the file or if the threat is a worm or Trojan 
horse, deletes the file. 


See “If you have = Quarantine the file 
spas header Makes the file inaccessible by any programs other than Norton 
page 70. AntiVirus. You cannot accidentally open the file and spread the virus, 


but you can still evaluate it for possible submission to Symantec. 


= Delete the file 
Removes the virus from your computer by deleting the file that 
contains the virus, worm or Trojan horse. It should be used only if the 
file cannot be repaired or quarantined. 


Malicious threats can be found during a manual or scheduled scan or by 
Auto-Protect when you perform an action with an infected file. Threats can 
also appear during an instant messenger session or when sending an 
email. The way that you handle a threat differs depending on whether a 
scan or Auto-Protect found the threat. 


If a virus is found during a scan 


If Norton AntiVirus finds a virus, Trojan horse, or worm during a scan or 
from an instant messenger session, you either receive a summary of the 
automatic repair or deletion results, or you have to use the Repair Wizard 
to resolve the problem. 
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Review the repair details 


If you have set your manual scan options so that Norton AntiVirus repairs 
or deletes files automatically, and all infected files could be repaired or 
deleted, the scan summary lists the number of files infected and repaired 
or deleted. This information is presented for status purposes only; you don’t 
need to take further action to protect your computer. If you want to know 
more, you can check the repair details to see which files were infected and 
with what threats. 


To review the repair details 
1 Inthe scanner window, in the Summary pane, click More Details. 


2 When you are done reviewing the results, click Finished. 


Use the Repair Wizard 


If there are files that could not be fixed, or if you have set options so that 
Norton AntiVirus asks you what to do when a virus is found, the Repair 
Wizard opens. If Norton AntiVirus did not attempt a repair, the Repair 
Wizard opens in the Repair pane. Otherwise, it opens in the Quarantine 
window. 


To use the Repair Wizard 


1 Ifthe Repair Wizard opens in the Repair pane, uncheck any files that 
you don’t want Norton AntiVirus to fix. 
All files are checked by default. This is the recommended action. 


2 Click Fix. 
If any files cannot be fixed or deleted, the Quarantine window opens. 
All files are checked to be added to the Quarantine by default. This is 
the recommended action. 


3 Inthe Quarantine window, uncheck any files that you do not want to 
quarantine. 


4 Click Quarantine. 
If any files could not be quarantined, the Delete pane opens. 
If you do not delete the infected files, the virus remains on your 
computer and can cause damage or be transmitted to others. 


5 Uncheck any files that you do not want to delete. 
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6 Click Delete. 
Once all of the files have been repaired, quarantined, or deleted, the 
Summary pane of the scanner window opens. 


7 When you are done reviewing the summary, click Finished. 


O) After repairing a boot virus on your hard drive, restart your computer. 


If a virus is found by Auto-Protect 


Auto-Protect scans files for viruses and other malicious threats when you 
perform an action with them, such as moving them, copying them, or 
opening them. If it detects a virus or virus-like activity, in most cases you 
receive an alert telling you that a virus was found and repaired. How you 
proceed depends on the operating system that you are using. 


If you are using Windows 98/98SE/Me 


If a virus or threat is found and repaired by Auto-Protect in Windows 98/ 
98SE/Me, you receive an alert telling you which file was repaired or 
deleted. 

To close the alert 


œ Click Finish. 


If you have set your options so that Auto-Protect asks you what to do when 
it finds a virus, the alert asks you to choose an action. The recommended 
action is always preselected. 


Isolates the infected file, but does not remove the threat. 
Select Quarantine if you suspect that the infection is 
caused by an unknown threat and you want to submit 
the threat to Symantec for analysis. 


Quarantine the infected 
file 
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Do not open the file, but 
leave the problem alone 


Stops the current operation to prevent you from using 
an infected file. This action does not solve the problem. 
You will receive an alert the next time that you perform 
the same activity. 


Ignore the problem and 
continue with the 
infected file 


Continues the current operation. Select this option only 
if you are sure that a virus, Trojan horse or worm is not 
at work. You will receive an alert again. If you are not 
sure what to do, select Do not open the file, but leave the 
problem alone. 


If a file cannot be repaired, you receive an alert telling you that the repair 
was not made and recommending that you quarantine the file. You have 
the same options as those listed in the table, with the exception of Repair 
the infected file. 


If you are using Windows 2000/XP 


See "If you have 
files in 
Quarantine” on 
page 70. 


If a threat is found and either repaired or automatically deleted by Auto- 
Protect in Windows 2000/XP, you receive an alert telling you which file 
was repaired or deleted and which virus, Trojan horse, or worm was 
infecting the file. If you have an active Internet connection, clicking the 
virus name opens the Symantec Web page that describes the virus. 


To close the alert 
% Click OK. 
If the file cannot be repaired, you receive two alerts, one telling you that 


Auto-Protect was unable to repair the file, and another telling you that 
access to the file was denied. 


You can set your Auto-Protect options to try to quarantine any infected files 
that it cannot repair. If you do this, you are informed if any files are 
quarantined. 
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To resolve problems with unrepaired files 


See “Performa full 1 Runa full system scan on your computer to ensure that no other files 


system scan” on : 
are infected. 
page 53. 


See “If a virus is 2 Follow the recommended actions in the Repair Wizard to protect your 


found during a . y 
scan" on page 65. computer from the infected files. 


If a virus is found by Script Blocking 


See “Ensure that Script Blocking scans Visual Basic and JavaScript scripts for viruses. If it 
Be F detects a virus or virus-like activity, in most cases you receive an alert 
page 51. telling you that a potential threat was found. 


You must choose one of the options to remove the threat. The 
recommended action is to stop the script from running. You can click Help 
on the alert for additional information about how to respond. 


If a threat is found by Worm Blocking 


See “Ensure that If a program tries to email itself or email a copy of itself, it could be a worm 
Ae e trying to spread via email. A worm can send itself or a copy of itself in an 
page 51. email message without any interaction with you. 


Worm Blocking continually scans outgoing email attachments for worms. If 
it detects a worm, you receive an alert telling you that a malicious worm 
was found. 


The alert presents you with options and asks you what to do. If you were 
not sending an email message at that time, then it is probably a worm and 
you should quarantine the file. You can click Help on the alert for additional 
information about how to respond. 


After you have responded to the threat and deleted the file, you could still 
have an infected system. Run LiveUpdate, scan your system, and, if 
necessary, go to the Symantec security response Web page 
(securityresponse.symantec.com) for the most up-to-date virus definitions 
clean-up tools. 
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If Inoculation alerts you about a change in 
system files 


® 
See "Ensure that 
protection settings 
are enabled" on 
page 51. 


Inoculation protection is available on Windows 98/98SE/Me systems only. 


System files can change for a variety of reasons. You may have updated 
your operating system or repartitioned your hard disk, or you could have a 
virus. Norton AntiVirus alerts you when a change occurs in your system 
files. 


If you get an alert about a change in your system files, you have two 
options. You can update your inoculation snapshot or repair the file. Before 
you repair the file, be sure your virus definitions are up-to-date and run a 
scan. 


To respond to inoculation changes 


% Inthe Alert window, select the action that you want to take. Your 
options are: 


Update the saved copy of | Use if the alert appears after a legitimate change 
my Master Boot Record | in system files. 


Restore my Master Boot | Use if you are certain the system did not change 
Record for legitimate reasons. 


If you have files in Quarantine 


Once a file has been placed in Quarantine, you have several options. All 
actions that you take on files in Quarantine must be performed in the 
Quarantine window. 


To open the Quarantine window 
1 Start Norton AntiVirus. 


2 Inthe Norton AntiVirus main window, click Reports. 
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3 Inthe Reports pane, on the Quarantined items line, click View 
Report. 


Z Norton AntiVirus Quarantine - Quarantined Items (0) 


— Ë Quarantined Items (0) 


Backup Items (0) 
Submitted to Symantec (0) 


The toolbar at the top of the Quarantine window contains all of the actions 
that you can perform on Quarantined files. 


Adds files to Quarantine. Use this action to quarantine a 
file that you suspect is infected. This action has no effect 
on files that are already in Quarantine. 


Provides detailed information about the selected file and 
the virus that is infecting it. 


Attempts to repair the selected file. Use this action if you 
have received new virus definitions since the file was 
added to Quarantine. 


Returns the selected file to its original location without 
repairing it. 


Deletes the selected file from your computer. 


Sends the selected file to Symantec. Use this option if you 
suspect that a file is infected even if Norton AntiVirus did 
not detect it. 


Runs LiveUpdate to check for new protection and program 
updates. Use this if you haven’t updated your virus 
definitions for a while and then try to repair the files in 
Quarantine. 
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To perform an action on a file in Quarantine 
1 Select the file on which you want to perform the action. 
2 Inthe toolbar, select the action that you want to perform. 


3 When you are finished, on the File menu, click Exit. 


If Norton AntiVirus cannot repair a file 


See “Keeping 
current with 
LiveUpdate” on 
page 59. 


One of the most common reasons that Norton AntiVirus cannot 
automatically repair or delete an infected file is that you do not have the 
most up-to-date virus protection. Update your virus protection with 
LiveUpdate and scan again. 


If that does not work, read the information in the report window to identify 
the types of items that cannot be repaired, and then take the appropriate 
action. 


Infected files with .exe, .doc, .dot, or | Use the Repair Wizard to solve the problem. 


-Xls file name extensions (any file | seg “Use the Repair Wizard” on page 66. 
can be infected) 


Hard disk master boot record, boot | Replace using the Rescue Disks or your 
record, or system files (such as operating system disks. 
IO.SYS or MSDOS.SYS) and floppy 


See “About Rescue Disks” on page 36. 
disk boot record and system files 


If your computer does not start properly 


See “About Rescue 
Disks" on page 36 
and "Create 
Emergency Disks” 
on page 22. 


If you have a virus on your computer and need to start the computer from 
an uninfected disk to remove the virus, or if you need to restore a boot 
record, use your Rescue Disks. If you do not have Rescue Disks, you can 
use your Emergency Disks to start the computer and remove the virus. If 
you need to restore boot records and do not have Rescue Disks, or if you 
need to restore system files, you must reinstall Windows. 


If you need to use Rescue Disks (Windows 98/98SE/Me) 


Sometimes a virus infection prevents your computer from starting 
normally. Some viruses can only be removed if the computer is started 
from a clean disk, not the infected hard disk. Often, a Norton AntiVirus 
alert tells you when to use your Rescue Disks. 
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You first need to determine if your Rescue Disks are current. This means 
that you have created or updated your Rescue Disks since you did any of 
the following: 


= Added, modified, or removed internal hardware 
= Added, modified, or removed hard disk partitions 
= Upgraded your operating system 

= Updated virus definitions 


If your Rescue Disks are not current, you can still use them to remove 
viruses from your computer. When the Rescue Disk screen appears, use 
only the Norton AntiVirus task. 


To use your Rescue Disks 


1 Insert the Basic Rescue Boot floppy disk into drive A and restart your 
computer. 
The Rescue program runs in DOS. 


2 Use the arrow keys to select the program that you want to run. 
A description of the selected program appears in the right pane of the 
Rescue program. Your choices are: 


Norton AntiVirus | Scans your computer for viruses and repairs any 
infected files 


Rescue Recovery Checks and restores boot and partition information 


Press Enter to run the selected program. 


4 Follow the on-screen instructions for inserting and removing the 
Rescue Disks. 


5 When the Rescue program is done, remove the Rescue Disk from drive 
A and restart your computer. 
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If you need to use Emergency Disks 


See “Create If you have not created Rescue Disks, you can use Emergency Disks to 


gan nee restart your computer and scan for viruses. 


To use Emergency Disks 
1 Insert Emergency Disk 1 into drive A and restart your computer. 
The Emergency program runs in DOS. 


2 Ensure that Antivirus is selected, then press Enter to begin the 
Norton AntiVirus Emergency program. 

3 Follow the on-screen instructions for inserting and removing the 
Emergency Disks. 
The Emergency program automatically scans your computer and 
removes Viruses. 


4 When the Emergency program is done, remove the Emergency Disk 
from drive A and restart your computer. 


If you are using the CD as an Emergency Disk 


See “I cannot start If you are using the Norton AntiVirus CD as an Emergency Disk, you can 
7 ahi oi ignore all of the instructions to change disks, as all necessary information 
is on the CD. 


O) You may need to change your computer’s BIOS Setup options to start from 
the CD-ROM drive. 


To use the CD as an Emergency Disk 
1 Insert the Norton AntiVirus CD into the CD-ROM drive. 


2 Restart your computer. 
The Emergency program scans your computer and removes viruses. 


Look up viruses on the Symantec Web site 


The Symantec Web site contains a complete list of all known viruses and 
related malicious code, along with descriptions. You must be connected to 
the Internet to look up viruses. 
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To look up viruses 

1 Start Norton AntiVirus. 

2 Inthe Norton AntiVirus main window, click Reports. 

3 Inthe Reports pane, on the Online Virus Encyclopedia line, click View 
Report. 
The Symantec Web site opens in your Internet browser. 


4 Use the links on the Web page to access the virus information for 
which you are looking. 


Look up viruses in Norton AntiVirus 


If you don’t have an active Internet connection, you can look up a virus 
name from within Norton AntiVirus. The Virus List dialog box lists the 
viruses in the current virus definition service files on your local computer. 
Because of the large number of viruses, the Virus List file does not include 
descriptions of each virus. 


Display: Jal Viruses 7] 

Virus Name Infects Info... | 
Print... | 

-1054 Programs 
-1097 Programs 
1106 Programs Help | 
-1391 Programs ~ 
1403 Programs Find... | 
-1403 [x] Programs 
_1458.4, Programs Find neyt | 
L152 Programs = 
_1587 Programs 
1689 Programs 
-1689 [x] Programs 
1695 Programs 
_172 Programs F| 


61373 Viruses Displayed 
Definitions Date: 6/19/02 


See “Keeping To ensure that you have the latest virus definitions, run LiveUpdate. 
current with 

LiveUpdate” on To look up virus names and definitions 

page 59. 


1 Start Norton AntiVirus. 
2 Inthe Norton AntiVirus main window, click Reports. 


3 Inthe Reports pane, on the Virus List line, click View Report. 
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To get more information about a specific virus 


1 Inthe Virus List dialog box, select the virus about which you want 
more information. 


2 Click Info. 


3 When you are done viewing the list, in the Virus List dialog box, click 
Close. 


Explore the Symantec service and support Web site 


The information in this chapter will help you solve the most frequently 
encountered problems. If you can’t find the solution to your problem here, 
there is a wealth of information on the Symantec Web site. You can find 
updates, patches, online tutorials, Knowledge Base articles, and virus 
removal tools. 


The Symantec service and support Web site offers information focused on 
your product and whether the product is for home or business use. 


To explore the Symantec service and support Web site 
1 Point your browser to www.symantec.com/techsupp 


2 On the service and support Web page, click Iam a home/small 
business user. 


3 On the introduction Web page, in the column on the left, click a link for 
the information that you want. 


If you cannot find what you are looking for using the links on the 
introduction page, try searching the Web site. 
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Explore the Symantec service and support Web site 


To search the Symantec service and support Web site 


1 


On the left side of any Web page in the Symantec service and support 
Web site, click search. 


Type a word or phrase that best represents the information for which 
you are looking. 
Use the following guidelines when searching the Symantec Web site: 


Type a single word in lowercase letters to find all occurrences of 
the word, including partial matches. For example, type install to 
find articles that include the word install, installation, installing, 
and so on. 


Type multiple words to find all occurrences of any of the words. 
For example, type virus definitions to find articles that include 
virus or definitions or both. 


Type a phrase enclosed in quotation marks to find articles that 
include this exact phrase. 

Use a plus (+) sign in front of all of the search terms and a space 
between terms, if you use more than one term, to retrieve 
documents containing all of the words. For example, +Internet 
+Security finds articles containing both words. 

For an exact match, type the search words in uppercase letters. 
To search for multiple phrases, enclose each phrase in quotation 
marks and use commas to separate the phrases. For example, 
"purchase product", "MAC", "Norton SystemWorks" searches for 
all three phrases, and finds all articles that include any of these 
phrases. 


Select the area of the Web site that you want to search. 


Click Search. 
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Here are some solutions to issues that might arise with Norton AntiVirus. 


My Rescue Disk does not work 


Due to the number of product-specific technologies used by manufacturers 
to configure and initialize hard drives, the Rescue program cannot always 
create a bootable disk automatically. If your Rescue Boot Disk does not 
work properly, do one of the following: 


= = If you have a special startup disk for your computer, add it to your 
Rescue Disk set. In an emergency, start from that disk. Remove the 
disk and insert your Rescue Boot Disk. At the DOS prompt, type 
A:RSHELL, press Enter, then follow the on-screen instructions. 

= Use the Disk Manager or similarly named program that came with 
your computer to make your Rescue Boot Disk bootable. Make sure to 
test your modified Rescue Boot Disk. 


Sometimes, your Rescue Boot Disk does not work properly because you 
have more than one operating system installed, such as Windows 2000 and 
Windows 98. 


To modify your Rescue Boot Disk 
1 Start up from your hard drive. 
Insert your Rescue Boot Disk into drive A. 


At the DOS prompt, type SYS A: 


FWN 


Press Enter. 
This transfers the operating system to the Rescue Boot Disk. Be sure to 
retest your Rescue Disks. 


The alert tells me to use my Rescue Disks, but | did not create 
them 


See “To create With your Norton AntiVirus CD you can create Emergency Disks. Although 
iei Ania they are not as powerful as the Rescue Disks you create, you can use the 
page 22. Emergency Disks to recover from most common emergencies. 

See “If you are You can use the CD that contains Norton AntiVirus as an Emergency Disk 


using the CD as an 
Emergency Disk" 
on page 74. 


if your computer can start from the CD-ROM drive. 


Once you have created the Emergency Disks, use them to solve the 
problem. 
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| cannot start from drive A 


See "My Rescue 
Disk does not 
work" on page 79. 


If your computer does not check drive A first on startup, use your 
computer’s Setup program to change settings. 


Be careful when making changes using your computer’s Setup program. If 
you have never used it before, you may want to refer to your computer 
manufacturer’s documentation. 


To change your computer's settings 


1 Restart your computer. 
A message appears telling you the key or keys to press to run SETUP, 
such as Press <DEL> if you want to run SETUP. 


2 Press the key or keys to launch the Setup program. 


3 Set the Boot Sequence to boot drive A first and drive C second. 
Setup programs vary from one manufacturer to the next. If you cannot 
find the Boot Sequence option, use the Setup program’s Help system, 
refer to the documentation that came with your system, or contact 
your system’s manufacturer. 


4 Save the changes, then exit the Setup program. 


You may need to use a special boot disk rather than the Rescue Boot Disk. 
In this case, use the boot disk or startup disk that came with your 
computer. 


If your computer is set up with more than one operating system, such as 
Windows 2000 and Windows 98, you may need to modify the Rescue Boot 
Disk. 


Auto-Protect does not load when | start my computer 


If the Norton AntiVirus Auto-Protect icon does not appear in the lower-right 
corner of the Windows taskbar, Auto-Protect is not loaded. There are three 
likely reasons this is happening. 


You may have started Windows in safe mode. Windows restarts in safe 
mode if the previous shutdown did not complete successfully. For example, 
you may have turned off the power without choosing Shut Down on the 
Windows Start menu. 
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To restart Windows 

1 On the Windows taskbar, click Start > Shut Down. 
2 Inthe Shut Down Windows dialog box, click Restart. 
3 Click OK. 


Norton AntiVirus may not be configured to start Auto-Protect 
automatically. 


To set Auto-Protect to start automatically 

1 Start Norton AntiVirus. 

2 Inthe Norton AntiVirus main window, click Options. 

3 Inthe Options window, under System, click Auto-Protect. 

4 Ensure that Start Auto-Protect when Windows starts up is checked. 


Norton AntiVirus may not be configured to show the Auto-Protect icon in 
the tray. 


To show the Auto-Protect icon in the tray 
1 Start Norton AntiVirus. 


In the Norton AntiVirus main window, click Options. 


In the Options window, under System, click Auto-Protect. 


FWN 


Ensure that Show the Auto-Protect icon in the tray is checked. 


| have scanned and removed a virus, but it keeps infecting 
my files 
There are four possible reasons a virus could be reappearing. 


The virus might be in a program file with an unusual extension for which 
Norton AntiVirus is not configured to look. 


To reset Norton AntiVirus scanning options 
1 Start Norton AntiVirus. 
In the Norton AntiVirus main window, click Options. 


In the Options window, under System, click Manual Scan. 


FWN 


Under Which file types to scan for viruses, click Comprehensive file 
scanning. 


5 Click Manual Scan > Bloodhound. 
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See "If you need to 
use Rescue Disks 
(Windows 98/98SE/ 
Me)" on page 72. 


6 Ensure that Enable Bloodhound heuristics is checked, and click 
Highest level of protection. 


7 Click OK. 


8 Scan all of the disks that you use and repair all infected files. 


The source of the infection could also be a floppy disk. Scan all of the floppy 
disks that you use to ensure that they are free of viruses. 


Another reason could be that the virus is remaining in memory after you 
remove it from the boot record. It then reinfects your boot record. Use your 
Rescue Disks to remove the virus. 


If the problem is a Trojan horse or worm that was transmitted over a shared 
network drive, you must disconnect from the network or password protect 
the drive to let Norton AntiVirus delete the problem. 


Norton AntiVirus cannot repair my infected files 


See “Keeping 
current with 
LiveUpdate” on 
page 59. 


See "If you have 
files in 
Quarantine” on 
page 70. 


The most common reason that Norton AntiVirus cannot repair your infected 
files is that you do not have the most current virus protection on your 
computer. Update your virus protection regularly to protect your computer 
from the latest viruses. 


If after using LiveUpdate the virus still cannot be repaired, the file may be 
corrupted, or contain a new virus. There are two additional options: 


= Quarantine the file and submit it to Symantec. 


a [fa non-infected copy of the file exists, delete the infected file and 
replace it with the non-infected file. 


| get an error when testing basic Rescue Disks 


If you get the message Non-system disk, replace the disk and press any key 
when testing your Rescue Disks, the Rescue program may not have 
prepared the floppy boot files correctly. 


To repair the Rescue Boot Disk without having to reformat the disk 
and create a new Rescue Disk set 


1 Remove the Rescue Boot Disk and restart your computer. 
Insert the Rescue Boot Disk into the floppy disk drive. 
On the Windows taskbar, click Start > Run. 

In the Run dialog box, type SYS A: 

Click OK. 
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| can't receive email messages 
There are three possible solutions to this problem. 


Temporarily disable email protection. This might allow the problem email 
message to download so that you can once again enable email protection. 
You are protected by Auto-Protect and Script Blocking while email 
protection is disabled. 


To temporarily disable incoming email protection 
1 Start Norton AntiVirus. 

2 Inthe Norton AntiVirus main window, click Options. 
3 Inthe Options window, under Internet, click Email. 
4 Uncheck Scan incoming Email. 

5 Click OK. 

6 Download your email messages. 

7 


Reenable incoming email protection. 


See “About Your email client may have timed out. Make sure timeout protection is 
Internet options” 
On DARES. enabled. 


If you continue to experience problems downloading email messages, 
disable email protection. 


To disable email protection 

1 Start Norton AntiVirus. 

In the Norton AntiVirus main window, click Options. 
In the Options window, under Internet, click Email. 
Uncheck Scan incoming Email. 

Uncheck Scan outgoing Email. 

Click OK. 
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| can't send email messages 


If you get the message, Norton AntiVirus was unable to send your email 
message because the connection to your email server was disconnected, 
your email client may be set to automatically disconnect after sending and 
receiving mail. 


For Norton AntiVirus to scan outgoing email messages for viruses, it 
intercepts and scans the messages before they are sent to your email 
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provider. To resolve this issue, turn off this option within your email client. 
Consult your email client manual for instructions on how to do this, or 
disable Norton AntiVirus outgoing email scanning. 


To disable outgoing email scanning 

1 Start Norton AntiVirus. 

In the Norton AntiVirus main window, click Options. 
In the Options window, under Internet, click Email. 
Uncheck Scan outgoing Email. 

Click OK. 
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Service and support 
solutions 


The Service & Support Web site at http://service.symantec.com supports 
Symantec products. Customer Service helps with nontechnical issues such 
as orders, upgrades, replacements, and rebates. Technical Support helps 
with technical issues such as installing, configuring, or troubleshooting 
Symantec products. 


Methods of technical support and customer service can vary by region. For 
information on support offerings in your region, check the appropriate Web 
site listed in the sections that follow. 


If you received this product when you purchased your computer, your 
computer manufacturer may be responsible for providing your support. 


Customer service 


The Service & Support Web site at http://service.symantec.com tells you 
how to: 


= = Subscribe to Symantec newsletters. 

= Locate resellers and consultants in your area. 

= Replace defective CD-ROMs and manuals. 

= Update your product registration. 

= Find out about orders, returns, or a rebate status. 

= Access Customer Service FAQs. 

= Posta question to a Customer Service representative. 


= Obtain product information, literature, or trialware. 
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Technical support 


For upgrade orders, visit the Symantec Store at: 
http://www.symantecstore.com 


Technical support 


Symantec offers two technical support options for help with installing, 
configuring, or troubleshooting Symantec products: 


Online Service and Support 

Connect to the Symantec Service & Support Web site at 
http;//service.symantec.com, select your user type, and then select 
your product and version. You can access hot topics, Knowledge Base 
articles, tutorials, contact options, and more. You can also post a 
question to an online Technical Support representative. 


PriorityCare telephone support 

This fee-based (in most areas) telephone support is available to all 
registered customers. Find the phone number for your product at the 
Service & Support Web site. You’ll be led through the online options 
first, and then to the telephone contact options. 


Support for old and discontinued versions 


When Symantec announces that a product will no longer be marketed or 
sold, telephone support is discontinued 60 days later. Technical 
information may still be available through the Service & Support Web site 
at: 

http;//service.symantec.com 


Subscription policy 


If your Symantec product includes virus, firewall, or Web content 
protection, you may be entitled to receive updates via LiveUpdate. 
Subscription length varies by Symantec product. 


After your initial subscription ends, you must renew it before you can 
update your virus, firewall, or Web content protection. Without these 
updates, you will be vulnerable to attacks. 


When you run LiveUpdate near the end of your subscription period, you are 
prompted to subscribe for a nominal charge. Simply follow the instructions 
on the screen. 
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Worldwide service and support 


Technical support and customer service solutions vary by country. For 
Symantec and International Partner locations outside of the United States, 
contact one of the service and support offices listed below, or connect to 
http://service.symantec.com and select your region under Global Service 
and Support. 


Service and support offices 


North America 


Symantec Corporation http://www.symantec.com/ 
555 International Way 

Springfield, OR 97477 

U.S.A. 


Australia and New Zealand 


Symantec Australia http://www.symantec.com/region/reg_ap/ 
Level 2, 1 Julius Avenue +61 (2) 8879-1000 

North Ryde, NSW 2113 Fax: +61 (2) 8879-1001 

Sydney 

Australia 


Europe, Middle East, and Africa 


Symantec Customer Service Center http://www.symantec.com/region/reg_eu/ 
P.O. Box 5689 +353 (1) 811 8032 

Dublin 15 

Ireland 


Latin America 


Symantec Brasil Portuguese: 

Market Place Tower http://www.service.symantec.com/br 
Av. Dr. Chucri Zaidan, 920 Spanish: 

12 andar http://www.service.symantec.com/mx 
Sao Paulo - SP Brazil: +55 (11) 5189-6300 

CEP: 04583-904 Mexico: +52 55 5322 3681 (Mexico DF) 
Brasil, SA 01 800 711 8443 (Interior) 


Argentina: +54 (11) 5382-3802 


Every effort has been made to ensure the accuracy of this information. 
However, the information contained herein is subject to change without 
notice. Symantec Corporation reserves the right for such change without 
prior notice. 


July 25, 2002 
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Glossary 


access rights 


administrator 


alert 


boot record 


browser 


The types of operations and files a user or 
group can access and what the user or 
group is permitted to do with those 
directories and files. 


1. A person who oversees the operation of a 
network. 2. A person responsible for 
installing programs on a network and 
configuring them for distribution to 
workstations. This person may also update 
security settings on workstations. 


A dialog box that appears in a graphical 
user interface (GUI) to signal that an error 
has occurred, or to provide a warning. 


A sector at the beginning of each disk that 
identifies the disk’s architecture (sector 
size, cluster size, and so on). For startup 
disks, the boot record also contains a 
program that loads the operating system. 


A software application that makes 
navigating the Internet easy by providing a 
graphical user interface. This lets the user 
click menus, icons, or buttons rather than 
learn difficult computer commands. Also 
called a Web client. 
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compressed file 


download 


email (electronic mail) 


executable file 


extension 


file type 


HTML (Hypertext Markup 
Language) 


icon 


infected file 


A file that has been compressed using a 
special data storage format in order to save 
space on your disk. 


To transfer a file from one computer system 
to another, through a modem or network. 
Download usually refers to the act of 
transferring a file from the Internet, a BBS 
(bulletin board system), or a service such as 
America Online. 


A method of exchanging messages and files 
with other people via computer networks. A 
popular protocol for sending email is SMTP 
(Simple Mail Transfer Protocol). Popular 
protocols for receiving email are POP3 
(Post Office Protocol 3) and IMAP4 
(Internet Message Access Protocol 4). Web- 
based email services use HTTP (Hypertext 
Transfer Protocol) for sending and 
receiving email. 


A file containing program code that can be 
launched. Generally includes any file that is 
a program, extension, or a system file. 


The three-letter ending on a file name that 
can associate the file with an activity or 
program, so that double-clicking the file 
causes the program to start. Examples 
include .txt (text) and .exe (programs). 


A code that is stored in each file that 
associates it with a program or activity. 


A standard language for documents on the 
World Wide Web. Codes inserted in a text 
file instruct the Web browser on how to 
display a Web page’s words and images for 
the user, and define hypertext links 
between documents. 


A graphic symbol used to represent a file, 
folder, disk, or other entity. 


A file that contains a virus, Trojan horse, or 
worm. 
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JavaScript A scripting language that is similar to, but 
less capable than, Java. JavaScript code can 
be included in Web pages to add 
interactivity and other functionality. 


known virus A virus for which Norton AntiVirus has a 
definition. See also virus definition. 


local A term that refers to your computer, as 
opposed to a remote computer. 


log A record of actions and events that take 
place on a computer or handheld device. 


network A set of computers and associated 
hardware connected together in a work 
group for the purpose of sharing 
information and hardware among users. 


operating system A program that ties the capabilities of 
computer hardware and software to input/ 
output devices such as disks, keyboards, 
and mouse devices. 


password A character sequence entered by users to 
verify their identities to a network or 
program. The most secure passwords are 
difficult to guess or find in a dictionary, and 
contain a combination of capital letters, 
lowercase letters, numbers, and symbols. 


POP3 (Post Office Protocol 3) | An email protocol used to retrieve email 
from a remote server over an Internet 
connection. 


program A set of instructions that can be executed 
by a computer, and are written for a specific 
purpose such as word processing or 
creating a spreadsheet. Also called 
software. 


Quarantine A disk location established by Norton 
AntiVirus to isolate files suspected to 
contain a virus so that the files can’t be 
opened or executed. 
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Disks that can be removed, as opposed to 
those that cannot. Some examples of 
removable media are floppy disks, disk 
cartridges (such as SyQuest and Bernoulli, 
for example), CDs, and Zip disks. 


A list of instructions that can be executed 
without user interaction. Unlike other types 
of programs, scripts can be opened with 
text editors or word processing programs, 
so they are very easy to change. Examples 
of scripts include Visual Basic programs 
and network login scripts. 


A disk that contains the system files 
necessary to start your computer. Startup 
disk usually refers to a floppy disk or CD 
that can be used to start the computer in an 
emergency. 


A circumstance, event, or person with the 
potential to cause harm to a system in the 
form of destruction, disclosure, 
modification of data, and/or denial of 
service. 


A predetermined period of time during 
which a given task must be completed. If 
the timeout value is reached before or 
during the execution of a task, the task is 
canceled. 


A virus for which Norton AntiVirus does 
not contain a definition. See also virus 
definition. 
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A self-replicating program intentionally 
written to alter the way your computer 
operates without your permission or 
knowledge. A virus attaches copies of itself 
to other files, and when activated, may 
damage files, cause erratic system 
behavior, or merely display annoying 
messages. Self-replication differentiates 
viruses from other virus-like computer 
infections such as Trojan horse programs 
and worms. See also virus-like activity. 


Virus information that lets an antivirus 
program recognize and alert you to the 
presence of a specific virus. See also 
unknown virus. 


A list that shows all of the viruses for which 
Norton AntiVirus has a virus definition. It is 
important to update this list regularly. 


An activity or action that Norton AntiVirus 
perceives as the work of a possible 
unknown virus. Virus-like activity alerts do 
not necessarily indicate the presence of a 
virus, but should be investigated. 


A single document on the World Wide Web 
that is identified by a unique URL. A Web 
page can contain text, hyperlinks, and 
graphics. 


A group of Web pages managed by a single 
company, organization, or individual. A 
Web site may include text, graphics, audio 
and video files, and hyperlinks to other 
Web pages. 
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A program that replicates without infecting 
other programs. Some worms spread by 
copying themselves from disk to disk, while 
others replicate only in memory to slow a 
computer down. So far, worms do not exist 
in the Macintosh world. 


Write-protecting disks prevents viruses 
from infecting them. To write-protect a 3.5- 
inch disk, slide the tab on the back of the 
disk to uncover the hole through the disk. 
Also referred to as a locked disk or 
read-only disk. 
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Norton AntiVirus 
CD Replacement Form 


CD REPLACEMENT: After your 60-Day Limited Warranty, if your CD becomes unusable, fill out and return 1) this form, 2) your damaged 
CD, and 3) your payment (see pricing below, add sales tax if applicable), to the address below to receive replacement CD. DURING THE 60- 
DAY LIMITED WARRANTY PERIOD, THIS SERVICE IS FREE. You must be a registered customer in order to receive CD replacements. 


If your Symantec product was installed on your computer when you purchased it, contact your hardware manufacturer for CD replacement 
information. 


FOR CD REPLACEMENT 


Please send me: ___ CD Replacement 


Name 


Company Name 


Street Address (No P.O. Boxes, Please) 


City State Zip/Postal Code 


Country* Daytime Phone 


Software Purchase Date 


*This offer limited to U.S., Canada, and Mexico. Outside North America, contact your local Symantec office or distributor. 


Briefly describe the problem: 


CD Replacement Price $ 10.00 SALES TAX TABLE: AZ (5%), CA (7.25%), CO (3%), CT (6%), DC (5.75%), FL (6%), GA (4%), 
Sales Tax (See Table) IA (5%), IL (6.25%), IN (5%), KS (4.9%), LA (4%), MA (5%), MD (5%), ME (6%), MI 


Shipping & Handling $ 9.95 (6%), MN (6.5%), MO (4.225%), NC (6%), NJ (6%), NY (4%), OH (5%), OK (4.5%), PA 
TOTAL DUE (6%), SC (5%), TN (6%), TX (6.25%), VA (4.5%), WA (6.5%), WI (5%). 

se Please add local sales tax (as well as state sales tax) in AZ, CA, FL, GA, MO, NY, OH, OK, 
SC, TN, TX, WA, WI. 


FORM OF PAYMENT ** (CHECK ONE): 


___ Check (Payable to Symantec) Amount Enclosed $ _ Visa __ Mastercard __ AMEX 
Credit Card Number Expires 
Name on Card (please print) Signature 


**U.S. Dollars. Payment must be made in U.S. dollars drawn on a U.S. bank. 


MAIL YOUR CD REPLACEMENT ORDER TO: 


Symantec Corporation 

Attention: Order Processing 

555 International Way 

Springfield, OR 97477 (800) 441-7234 

Please allow 2-3 weeks for delivery within the U.S. 


Symantec and Norton AntiVirus are trademarks of Symantec Corporation. 
Other brands and products are trademarks of their respective holder/s. S y I | antec. 


© 2002 Symantec Corporation. All rights reserved. Printed in the U.S.A. 


